In the case of a contested 1777 (the real owner and the hacker both publish a kind 1777) then it’ll be up to users to follow the pubkey of who they think is the real successor and not the hacker.