NimbusBank mobile app shipped with hard-coded staging key for 11 months

A debug fallback path remained reachable in production builds. The bank says no funds were moved; researchers say that is not the question to ask.