Malicious app on Solana DApp Store removed after one hour; requested user mnemonics

iconChainthink
Share
AI summary iconSummary
On November 2, a malicious app named "SKR Claim" appeared on the Solana DApp Store, requesting users' mnemonics. After breaching the portal, attackers modified the App Spotlight and Quests interface. Solana Mobile removed the app within an hour and is now uninstalling it from affected devices. The company has patched the vulnerability and reaffirmed that it will never request mnemonics or crypto assets. Traders monitoring altcoins should track the Fear & Greed Index for shifts in market sentiment.

ChainThink reports that on November 2, Solana Mobile announced on X that a malicious third-party app called "SKR Claim" was submitted to the Solana DApp Store, requesting users to enter their seed phrases.

The attacker previously gained unauthorized access to the DApp publishing portal and modified the App Spotlight and Quests interfaces. The app was taken down approximately one hour after being displayed and is currently being removed from installed devices.

Solana Mobile has patched the vulnerability that allowed linking to apps not yet fully released and has reminded users that it will never ask for seed phrases or crypto assets, nor require users to connect their wallets to claim airdrops.

Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.