my friend/client registered his domain in Russia through a recognized registrar, but the anonymous developer never gave him the auth code. he wants to move hosting the domain to the US, but there is no cooperation from the registrar or ICANN on resolving this problem. we showed them canceled checks but it was no use. Just because we don't have the auth-code have we lost control of the disposition of the domain forever? is there no protocol for addressing this matter? we can't be the only people this has ever happened to? thanks in advance for any relevant advice.