Tags: signedness 

Rating: 0

tl;dr:
1. Probably strongly unintended solution
2. Send negative money transfer
3. Get the flag

Full writeup: https://github.com/p4-team/ctf/tree/master/2019-10-19-seccon/zk_pay