Rating:
TLDR
Check that to get the flag we must sign WITHDRAW in a multisignature together with the bank.
The multisignature is done by computing an aggregated key from the composition of the two keys using the binary group operation.
Use a so-called rogue-key attack to forge a signature that looks like it was signed by both users.