Btw, you can use the withdrawer address to the nullifier to make it address specific. This could prevent this type of attack. Every nullifier would be assigned to only one withdrawer address.