Rating:

TL;DR: Casting the invalid curve attack.

Original writeup (https://mystiz.hk/posts/2021-07-24-google-ctf/#tiramisu).