There are multiple bugs in cashu nutshell 0.20.0 that allow an attacker to steal funds from a mint. I would suggest that users withdraw (melt) all funds to avoid any losses.