This loop hole in registerfly.com was discovered by Valentino Viccetzar and was posted on his blog on March 13th you can find his blog below the 15 steps
1. Create A New Register Fly Account.
2. Login into the Old RegisterFly Account.
3. Click on Manage Domains
4. Click A Domain Name
5. Click On Change Ownership
6. Click On “Push your names to another user”
7. Click Continue
8. Enter The User ID of The New RegisterFly Account
9. Verify The User ID of The New RegisterFly Account is Correct
10. Click Continue
11. Select Each Domain Name to Push
12. Check the Check Box Marked “Change the Whois/Contact info on the names being pushed”
*** Check This Box Only if your Domains are Showing ProtectFly Information on a Whois Database, If it’s Showing your Real Information with Working Email Then Continue Without Checking the Check Box ***
13. Login into Your New RegisterFly Account, Your Recently Transferred Domains Should Be All Unlocked.
14. Click Change Whois Information And Get Authorization Code for Each Domain.
15. Begin Transfer to New Registrar.
Registerfly.com: Get Your Authorization Codes Now! (… before Titanic Sinks)