Bryan Pellegrino flagged a function in the Across token contract and claimed it allowed the owner to mint and burn ACX at will.