BlockSec revealed identifying a serious vulnerability in NBA's latest NFT collection that allows attackers to mint a large number of NFTs, without paying any tokens.