A public burn function introduced in the latest upgrade allegedly allows users to burn tokens from other addresses.
Source: https://cointelegraph.com/public/index.php/news/jake-paul-endorsed-safemoon-gets-hacked-after-introducing-a-bug-in-upgrade