Submitted by cccz, also found by 0x1f8b
Same as  https://github.com/code-423n4/2022-01-livepeer-findings/issues/194
Using the forceBurn() function of EthErc20, an address with BURNER_ROLE can burn an arbitrary amount of tokens from any address.
We believe this is unnecessary and poses a serious centralization risk.
https://github.com/skalenetwork/ima-c4-audit/blob/main/contracts/schain/tokens/EthErc20.sol#L64-L67
Update forceBurn function for only owner can burn his tokens.
cstrangedk (SKALE) disputed and commented:
GalloDaSballo (judge) commented:
