It's simple, really.
Someone - not necessarily Hanson - hijacked the domain by creating similar "issam.alameh@" email accounts and potentially using social engineering with the registrar (Tucows) to change the ownership. He then proceeded with an Escrow sale (according to Hanson). Issam says the Escrow emails are faked. In that case, Hanson is the thief, not the victim. He's the victim only if the Escrow.com emails are real. In that case, the hijacker is someone else.
At any rate, Hanson then put BQ.com on sale rather swiftly on 4.cn and it was sold - but never transferred.
Furthermore:
BQ.com was the "trojan horse".
Because through it, the hijacker accessed Issam's account. But for USD.net and YCW.com there are NO WHOIS changes, the domains are pushed straight into the Chinese account of Hanson's, on March 21.
I believe BQ.com was targeted because of its value; USD.net and YCW.com were cherry-picked afterwards as being valuable from the domains in Issam's account. The fact that they all ended up in the hands of the same buyer, raises suspicion.
Hanson needs to provide evidence about the Escrow.com transaction, such as a full email with headers etc.
Some interesting DNForum links:
3/31/2010 - Hanson is soliciting offers for LL.com domains
http://www.dnforum.com/f16/buy-nn-com-ll-com-thread-414078.html
At this point, he already has control of BQ.com and he's "sweetened" by the apparent low price he got it for.
4/20/2010 - Hanson is looking for help over domain reversal
http://www.dnforum.com/f557/need-help-sos-thread-416249.html
This is obviously after BQ.com was sold at 4.cn - odd timing?
6/14/2010 - Hanson asks for John Berryhill's assistance
http://www.dnforum.com/f299/domain-issue-thread-422471.html