do I understand this right ? :

1. A publisher of unique Art can use Non-fungible-tokens (that run on Ethereum, and incur the ‘gas’ cost)

2. A non-fungible token can be transferred, and at one point in time can only belong to one specific Ethereum address (therefore: non-fungible)

3. this attack allows a publisher’s name to be ‘impersonated’ by another Ethereum address. The piece of ‘Art’ is still non-fungible (that is belongs to one person only), but the author name (the provenance record) does not reflect the correct author

Any correction/ clarification are welcome of course.