A public burn function introduced in the latest upgrade allegedly allows users to burn tokens from other addresses.