Well, if the email address you use at the registrar is under the domain the attacker now controls, they can hijack it and potentially escalate to taking over yo

Well, if the email address you use at the registrar is under the domain the attacker now controls, they can hijack it and potentially escalate to taking over your registrar account as well. Hopefully you have 2FA set up and your registrar enforces it properly.