A malicious app called "SKR Claim" appeared in the Solana Mobile dApp Store's App Spotlight for one hour after unauthorized access to the company's publishing portal. Solana Mobile says it patched a linking bug and is removing the app from devices. The disclosure leaves open how the intruder got in and whether any funds were lost.
Solana Mobile said on Nov. 1 that a malicious app named "SKR Claim" appeared in its dApp Store Spotlight for one hour. The app asked users to enter their wallet seed phrases, and it surfaced after unauthorized access to the company's publishing portal.
What Solana Mobile changed
In its incident disclosure, the company said the App Spotlight and Quests interfaces had been changed following that access. It removed the app from the store and said removal from devices where it was installed was underway.
Solana Mobile also patched a bug that allowed links to apps that were not fully published. Crypto Briefing reports that the company is conducting a broader security review to catch similar gaps.
What the disclosure leaves out
The company's disclosure did not give installation or completed-removal counts, report whether any funds had been stolen, or explain how the unauthorized party gained access to the portal. Crypto Briefing adds that the company confirmed the breach did not compromise device security, the Seed Vault hardware wallet, or any on-chain systems.
SKR is used for governance and staking in Solana Mobile's ecosystem. Its original airdrop instructions directed Seeker phone users to claim through the built-in Seed Vault Wallet.
Solana Mobile said: "The Solana Mobile team will never ask you for your seed phrase".
Sources: The Defiant, Crypto Briefing
Trading involves risk.
Risk Disclaimer
