CPR researchers claim that the security threat, if exploited, could have enabled a threat actor to steal a user’s NFTs and crypto tokens in a single transaction.