Here is the relevant bit from Godaddy's Uniform Domain Dispute Resolution Policy (as approved by ICANN)
https://www.godaddy.com/gdshop/legal...IFORM%5FDOMAIN
If it's a standard ICANN thing, then perhaps the same thing will happen at every registrar.
5. All other disputes and litigation
All other disputes between you and any party other than us regarding your domain name registration that are not brought pursuant to the mandatory administrative proceeding provisions of Paragraph 4 shall be resolved between you and such other party through any court, arbitration or other proceeding that may be available.
6. our involvement in disputes
We will not participate in any way in any dispute between you and any party other than us regarding the registration and use of your domain name. You shall not name us as a party or otherwise include us in any such proceeding. In the event that we are named as a party in any such proceeding, we reserve the right to raise any and all defenses deemed appropriate, and to take any other action necessary to defend ourselves.
i.e. they wash their hands of it.
Ideally this should not prevent them from taking action against a thief WHILE THE THEFT IS TAKING PLACE...?
I'm going to write to Godaddy and ask what their procedures are...
I'm also wondering if this page helps people to hack into passwords...
https://www.godaddy.com/gdshop/faq/f...Fts%5Fpassword