Rating:
TLDR
1. Check that to get the flag we must sign WITHDRAW in a multisignature together with the bank.
2. The multisignature is done by computing an aggregated key from the composition of the two keys using the binary group operation.
3. Use a so-called rogue-key attack to forge a signature that looks like it was signed by both users.
