```\n1) Deposit ERC721\n2) Set creditor to malicious designed creditor\n3) Transfer the account to itself\n4) flashActionByCreditor to transfer ERC721\n    4a) account owns itself so _transferFromOwner allows transfers from account\n    4b) Account is now empty but still thinks is has ERC721\n5) Use malicious designed liquidator contract to call auctionBoughtIn\n    and transfer account back to attacker\n7) Update creditor to legitimate creditor\n8) Take out loan against nothing\n9) Profit\n```\n