Skip to content
Solana dApp Store Breach Exposes Users to Seed Phrase Theft

Solana dApp Store Breach Exposes Users to Seed Phrase Theft

First seen 2 Nov 2026, 13:14 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 2, 2026 at 14:16 UTC
  • •A fraudulent app in Solana's dApp Store prompted users for seed phrases.
  • •The app was live for about one hour before removal and patching.
  • •Users are advised to move assets to new wallets immediately.

On November 1, 2026, a fraudulent app named SKR Claim appeared in the Solana Mobile dApp Store after unauthorized access to its publishing portal. The app, which prompted users to enter their wallet seed phrases, was visible for about one hour before being removed. Solana Mobile has since patched the vulnerability that allowed the app to be published and is working to uninstall it from affected devices. Users who interacted with the app are advised to transfer their assets to new wallets immediately. The incident highlights the risks of verifying cryptocurrency applications, especially when fraudulent listings appear in official marketplaces. The SKR Claim app exploited a recent legitimate airdrop process, making it more convincing to users. The exact number of downloads or seed phrases submitted remains unclear.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-11-01
Fraudulent SKR Claim app appears
A malicious app gained unauthorized access to the Solana dApp Store, prompting users for seed phrases.
Kucoin
2026-11-01
App removed and vulnerability patched
Solana Mobile removed the fraudulent app and patched the vulnerability that allowed its publication.
Finance.Yahoo

More articles in this cluster (6)

Following this threat?

Track SKR Claim and Solana Mobile in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (7)

1 / 4

Common questions

What should users do if they interacted with the app?
Users are advised to move their assets to a new wallet immediately.
How long was the fraudulent app available?
The app was available for approximately one hour before being removed.
What steps has Solana Mobile taken in response?
Solana Mobile has patched the vulnerability and is working to uninstall the app from affected devices.