A flaw which means contactless cards can be used AFTER they've been cancelled has still not been fully fixed almost 18 months after MSE began campaigning on the issue.
https://www.moneysavingexpert.com/news/cards/2018/01/contactless-fraud-loophole-not-fully-fixed-18-months-after-mse-investigation