Via the WDPRS, one can even steal domains that are locked down tight; registrar-lock doesn't even matter!
http://wdprs.internic.net/
For more details on WDPRS do a search for it here (I've posted more details in previous posts) and/or on Google ... in a nutshell, the doors are still wide open -and, again to reiterate, registrar-lock, passwords, etc will NOT protect one's domains from exploitation via the WDPRS.
Ron