A public burn() function introduced in the latest upgrade allegedly allows users to burn tokens from other addresses.
Hackers, Hacks, YouTube, EXP Attack, Ponzi Scheme, UpgradeRead More
You might also be interested in reading Inside the blockchain developers’ mind: What is the ultimate scaling solution?.