According to Certik, it discovered an unverified Ember Sword NFT auction contract vulnerability, which has profited 60 WETH (about $195,000) from 159 victims who approved the contract. Certik reminds users to withdraw their approval of the relevant contract on Polygon.