I read the contract myself and have done the checking...my client legally owns the domain. I contacted the registrar and we'll see what happens.
I'd mentioned this because what's in the contract may not be in fact the actions they really took when registrering the domain; and if that's the case, you have an even better case against them. If the contractual language and agreements do not match whois, then they've breeched a contract, adding to their own woes and potential fallout. Hopefully the registrar will sort it all out expeditously for you and your client, and possibly even help build a case for sanctioning the company in question. Good luck - anxious to hear the resolution.
Did you have a function of when you registered the domain as being the "admin contact". If you put your info there you'd have a better chance of claiming the name...