There was a post on Embrace the Red a while ago. It also talks about how there is not even a hash required on-chain. https://embracethered.com/blog/posts/2021/

There was a post on Embrace the Red a while ago. It also talks about how there is not even a hash required on-chain. https://embracethered.com/blog/posts/2021/broken-nft-standards/ https://embracethered.com/blog/posts/2021/broken-nft-standar... It all is really up to whoever implements it to make decisions on how secure/verifiable/reliable an NFT is. Storing the image itself on-chain actually makes most often not a lot of sense if you think about it, but at least a hash should be required in such cases.