Vulnerabilities in the Cashu ECash Protocol

I found some vulnerabilities in Cashu's protocol for deterministic wallet recovery.