Back Kucoin

Solana Mobile dApp Store malware demands mnemonic phrases

Kucoin • November 1, 2026

ChainCatcher report: Solana Mobile posted on X that a malicious third-party app named “SKR Claim” was submitted to the Solana dApp Store. After gaining unauthorized access to the dApp publishing portal, the attackers modified the App Spotlight and Quests interfaces; this app prompts users to enter their seed phrases. The app was removed from the dApp Spotlight after approximately one hour and is currently being uninstalled from affected devices. The team has patched the vulnerability that allowed links to apps not fully published, and has reminded users that Solana Mobile will never request seed phrases or crypto assets, nor will it ask users to connect their wallets to claim airdrops.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Solana dApp Store Breach Exposes Users to Seed Phrase Theft On November 1, 2026, a fraudulent app named SKR Claim appeared in the Solana Mobile dApp Store after unauthorized access to its publishing portal. The app, which prompted users to enter their wallet seed phrases, was visible for about one hour before being removed. Solana Mobile has since patched the vulnerability that allowed the app to be published and is working to uninstall it from affected devices. Users who interacted with the app are advised to transfer their assets to new wallets immediately. The incident highlights the risks of verifying cryptocurrency applications, especially when fraudulent listings appear in official marketplaces. The SKR Claim app exploited a recent legitimate airdrop process, making it more convincing to users. The exact number of downloads or seed phrases submitted remains unclear. 2 sources 42

Extracted Entities

Solana Mobile dApp Store malware demands mnemonic phrases

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Malware (1)

Platforms (1)