One would assume that various accounts locks are also genuine mistake or system bug which will no doubts be fixed... in October, after the promo officially expires though.
Indeed, ICANN registrar accreditation agreement assumes that Netsol as a registrar has an obligation to let domain registrants manage their domains in one way or another, and the most common way to do so is to provide registrant with some management area accessible via working username/password. I think there is nothing that prevents registrar from accepting registrants instructions in some other way, such as by fax or phone if somehow authenticated, but it is not the case here.
So, since Netsol is still an ICANN-accredited registrar, I think that affected account holders will soon become able to access their domains - those domains that have been successfully transferred to NetSol of course, where the authocode was entered and transfer request sent to the registry. If, however, the registrant was unable to enter the code or approve the transfer or request the transfer in September due to login issues - well, thats life...
I just checked full list of services offered by NetSol and was somewhat shocked. Really, who handregs dot coms for $34.99 nowadays? Who would purchase reputation alert service ("Find out what people are saying about you!") for $9.95 per month ? And how many "domain validated" ssl certificates they sell each day for $54.99/yr? (similar domain validated cert has retail(!) price of $9 / year at namecheap for example)