tl;dr:1. Notice we can change public key every time we issue commands2. Grab server public key point Q3. Calculate "fake" public key S = P-Q4. Withdraw using key S, so that S+Q = P for which we know private key
Full writeup: https://github.com/p4-team/ctf/tree/master/2019-09-14-realworld-quals/bank