$600m in cryptocurrencies swiped from Poly Network servers after security snafu