SECURITY ALERT
The store’s own spotlight pointed at it.
That was the trick.
A malicious app called “SKR Claim” that asked users to type in their seed phrases was promoted inside the Solana dApp Store for about an hour on Sunday, after someone gained unauthorised access to the store’s publishing portal, Solana Mobile said on X at 18:34 UTC.
The attacker used that access to change the store’s App Spotlight and Quests screens, the company said.
It was removed after about an hour, and is now being pulled from phones where it was installed.
The cause, per the company: a bug that let the store link to apps that were not fully published. It says the bug is patched.
SKR is the name of Solana Mobile’s own token. Its official claims run inside Seed Vault Wallet, under the Activity Tracking tab, the company’s claim guide says.
Solana Mobile has not said how many people installed the app, whether any wallets were emptied, or who was behind it.
No loss figure is public. That is not the same as no loss.
Protect yourself
- If you entered a seed phrase into “SKR Claim”, treat that wallet as compromised: create a new wallet with a fresh seed phrase and move what is left.
- Solana Mobile says it will never ask for your seed phrase, for crypto, or for you to connect a wallet to claim an airdrop.
- A store placement is not a safety check.
Who else had the keys to that portal?
Corrections and new evidence: [email protected]
This article is for information only and is not investment advice.