Let's say, there's manufacturer that produces luxury watches, and he uses Cardano NFTs to track their authenticity. He embeds unique serial number of a watch into metadata of NFT. One watch - one NFT, that is.
But a bad actor could:
- buy the simplest but real watch along with an NFT from the manufacture
- create a replica of the most expensive watch of the manufacturer
- change the metadata of that NFT -- the serial number and photo of a watch, such that metadata would describe a replica
- sell the replica along with the updated NFT which now embeds metadata which describes the expensive replica
What prevents this from being possible?