In January 2022, it had been documented that some NFTs had been being exploited by sellers to unknowingly gather users' IP addresses. The "exploit" works via the off-chain nature of NFT, given that the consumer's Personal computer instantly follows a web address within the NFT to display the information. https://financefeeds.com/dutch-neobank-bunq-files-for-u-s-broker-dealer-license/