amazing GD non-action 3 days later.
It is amazing if one especially doesn't care how sensitive these things can be,
although it's understandable if one cares only about results. In my ex-registrar
life, I've had alleged hijacking cases that turn out to be he-said-she-saids we
weren't in a legally-empowering position to mediate.
These things do take time, and it's not always resolved almost immediately. If
anything, the registrar can at least give the OP an update whether something
had changed or not.
The domain can be transferred out if it's unlocked, auth code given, etc. But
the registrar might lock it up and override the user's control before that might
happen.