Polymarket will pay an additional $1.2m to about 5,500 wallets after malicious code from a compromised third-party script exploited active sessions during an hour-long trading halt.