There was an exploit in the Marketplace, person SENDING the points would leave the "Cancel" page open or wait until he saw the Carbon money \ paypal money arrive to their account then quickly hit Cancel and get their points back.

You can no longer Cancel after you send the points, you can only dispute..

So everyone is once again, 100% protected.