A fraudulent app named SKR Claim appeared in the Solana Mobile dApp Store Spotlight on November 1, 2026, following unauthorized access to the publishing portal. The app, which mimicked a legitimate token claim tool, remained available for about an hour before being removed. Solana Mobile has since patched the vulnerability that allowed the unauthorized listing and is working to remove the app from affected devices.
The incident raises concerns about the security of cryptocurrency app marketplaces. The fake SKR Claim app exploited the trust users place in official app stores by appearing in a featured section. Solana Mobile emphasized that it never asks users to disclose seed phrases or connect wallets to external applications to claim airdrops.
Users who installed the app and entered their seed phrases have been advised to move their assets to new wallets immediately. The breach did not compromise the Seed Vault hardware wallet, device security, or the blockchain itself, but it highlights the risks of phishing attacks in the crypto space.
The incident occurred as the Solana dApp Store continues to grow, recently surpassing 1,500 applications. Solana Mobile has not disclosed the number of installations, confirmed financial losses, or the attacker’s identity. The company is urging users to remain vigilant and avoid sharing seed phrases with any applications.