A few years ago, I remember reading about some NFT contract attack that did something similar. So I'm sure it's out there now.