You guys are funny.

Polo clearly isnt safe for accounts without 2fa.

Polo knows its site continually gets hacked by this type of attack.

Polo is guilty by allowing this to continue. Easy lawsuit win.


Edit. Polo also made and kept money from the fraud, ie transaction fees. Sounds guilty by association to me.