I'd like to see mumus and other developers go through the source code and make sure no coins were premined by the developer. I'd also like to know if there is a chance the BURN address actually spends coins - if so that should also be addressed in the hard fork.
The burn address can't spend coins because generating a private key that maps to an address that consists of a sequence of words (like "SLMCoinMainNetworkBurnAddr") would take an eternity.
(unless an attacker is capable of cracking both ECDSA and RIPEMD-160 [edit: and SHA256] - but in this case, the attacker won't bother with SLM and steal some BTC instead

)
main.h:110
//Burn addresses
const CBitcoinAddress burnOfficialAddress("SfSLMCoinMainNetworkBurnAddr1DeTK5");
const CBitcoinAddress burnTestnetAddress("mmSLiMCoinTestnetBurnAddress1XU5fu");