Check Point Research disclosed a flaw: a malicious NFT link could run JavaScript and push a `setApprovalForAll` request to a victim's wallet
Apr 2022outcome unclear- Outcome
- Patched; Rarible noted the victim still had to sign
- Loss
- None reported
- Recovered or reimbursed
- Fixed before disclosure





