Insecure Nedbank App

My phone was ******. The ***** gained access to my bank account simply by clicking on “ reset my password link” no other authentication was necessary on the nedbank app. Because the ***** had the phone obviously the approve it messages was done. The phone was blocked by mtn at 14:00 that Friday and when i called the phone it was swiched off. How did the approve it messages get through. I would advise people not to use the app as its very easy to get past the security measures. The ***** managed to ***** a substantial amount of money by the time I realized the next day . Very easy to get around the apps security. Be aware.