I think NFT also could be a way, if u read this thread and tell me whether this scenario is really possible?
Put in mind that Alice could also, due to the anonymity property, create like N addresses & make them look like N bidding account in her own auction; ie transfer the Flashloan money to a different account of hers with no need for Bob.