ChainThink reports that on November 2, Solana Mobile announced on X that a malicious third-party app called "SKR Claim" was submitted to the Solana DApp Store, requesting users to enter their seed phrases.
The attacker previously gained unauthorized access to the DApp publishing portal and modified the App Spotlight and Quests interfaces. The app was taken down approximately one hour after being displayed and is currently being removed from installed devices.
Solana Mobile has patched the vulnerability that allowed linking to apps not yet fully released and has reminded users that it will never ask for seed phrases or crypto assets, nor require users to connect their wallets to claim airdrops.




