The real correct way to do it is to require authentication of your individuality and let you bid only once.

Or don't show what the bids are until the auction closes.

The problem is that they're mixing multiple types of auctioning together and it doesn't work well.