$2 million worth of MATIC tokens stolen before Polygon's recent upgrade