The L1 multisig contract had already been deployed to the identical address on L2. A bad actor was able to