Break El Gamal for Elliptic Curves
Well, one obvious method (which assumes that either there's a point on the elliptic curve with $x=0$, or the verifier doesn't check if $R$ is on the curve) is:
$$m1 = 0$$
$$R1 = (0, y)$$
$$s1 = 0$$
This satisfies the verification equation...