It should be noted that late last night all four domains that had been pushed out got pushed back into my account and a note that it was by Registerfly itself and not from the person who had stolen them. I don't know if they had multiple reports about the user it went to or what exactly the deal was, but it's now taken care of, and even before the office opened in the morning on Monday, which is when I expected to get some serious response on it.
On top of that, all four names look like they have had their renewal date extended by a year. Not sure if that was something Registerfly did or if the thief renewed them all once he had control and i just benefited from it.
I have had several problems with Registerfly in the past, mostly with glitches in listings and renewals/transfers, but as long as you double check everything and contact them when you spot something (repeatedly, as the first response to any support ticket looks like it was written by someone in India who never even heard of a domain name) it has always gotten taken care of for me.