I nearly did an article on this, too. Glad someone did. Man, I was deploying an ERC721 that very night & saw the gas spiking & I went to see what it was. Those little things were going off quickly at 0.02, and I told myself I was gonna go grab a few after I deployed. But then my own gas fees were so damn high that night that I ran out of extra ETH & missed out, lol... was pretty pissed when I saw them at like .6 or whatever the next day -- and then I watched the floor tumble because of the apparent racist content??? (which I didn't see, but maybe it's there?) ... and then I saw some dude on Reddit claiming someone had stolen the whole collection! In that post, the guy seemed to be thinking that someone had seen it on the OS testnet, but it could just as well have been from anyone seeing the IPFS link in the contract like you say here. Good lord!!! That collection has done 4,200 ETH in volume since. Man if one thing is true, it's that lessons in the NFT space are hard-learned. Never put the actual post-reveal IPFS link out there anywhere -- **especially** in the contract! I feel so sorry for whomever lost this collection & hope something can be done to recover funds from the scammers (even if this was a pretty bad mistake on the devs/owners' part).