Function burn is used for burning tokens of an account. If we look at _burn we can see that the first parameter is account. which sounds better than the to we are currently using.
Manual Review
Change the parameter from to to account.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.