Today a malicious third party app named “SKR Claim” was submitted to the Solana dApp Store. The App Spotlight and Quests UI were updated following unauthorized access to the dApp Publishing Portal. The app requested entry of user seed phrases.

The app was live on the dApp Spotlight for one hour before being removed from the dApp Store. It is currently being removed from devices where it was installed.

Following review, our team identified and patched a bug that allowed linking to apps that were not fully published to mitigate this from happening again.

The Solana Mobile team will never ask you for your seed phrase, for crypto, or to connect your wallet to other apps/sites to claim airdrops.