I am almost certain this issue has nothing to do with cashu, but rather with their lnaddr/LUD-16 backend provider. If they automatically mint tokens from all incoming lightning transactions, then alternatively that is the source of the problem.