Unknown Hong Kong-based spoofers take CPO for millions, 64% of pool holdings