A fake Ledger app on the Apple App Store drained $9.5M in crypto

Even if they check for impersonation, it doesn’t change what the app actually does once you interact with it

I suspect that part of the problem is that Apple does monitor for at least trivial app duplicates, but only between apps submitted to the app store. Ledger only offers theirs via direct download, so to Apple, I supposed it just doesn't exist...

No idea if app notarization or however their latest "security through super diligent app review" snake oil is called could have caught this or if it doesn't receive enough data about the app to perform such checks.

Complete transaction finality by default is probably indeed not great for retail use, but what does this have to do with this particular incident?

I think people would be equally furious if Apple were to admit an impostor phishing app posing as a major bank or brokerage into the App Store.