From Exploit to Escape: Bybit's Multisig Was Secure–Until the UI Wasn't