{"url":"https://newsforagent.com/news/2026-11-01/solana-mobile-malicious-skr-claim-app","markdown_url":"https://newsforagent.com/news/2026-11-01/solana-mobile-malicious-skr-claim-app.md","title":"Solana Mobile Pulls Fake SKR Claim App After Portal Breach","headline":"Solana Mobile Removes Malicious SKR Claim App From dApp Store After One Hour","description":"Solana Mobile pulled a fake SKR Claim app from its dApp Store after about an hour, patched the publishing portal flaw and began wiping the app from devices.","section":"Incidents","published_at":"2026-11-01T19:23:47+00:00","modified_at":"2026-11-01T19:23:47+00:00","author":"News Desk","key_takeaways":["A fake 'SKR Claim' app appeared in Solana Mobile's App Spotlight for about one hour on November 1 before being removed.","The app collected seed phrases, but Solana Mobile said device security, the Seed Vault hardware wallet and on-chain systems were not compromised.","Solana Mobile patched the publishing portal vulnerability and is conducting a broader security review."],"companies":[{"name":"Solana Mobile","is_primary":true,"profile_url":"https://akta.pro/company-profiles/004eme7/solana-mobile","website":"https://solanamobile.com"}],"source":{"publisher":"Crypto Briefing","title":"Solana Mobile patches bug after malicious app appears in dApp Portal","url":"https://cryptobriefing.com/solana-mobile-patches-bug-malicious-app-dapp-portal/"},"other_sources":[],"tags":["Incidents","Solana Mobile"],"body_markdown":"[Solana Mobile](https://akta.pro/company-profiles/004eme7/solana-mobile) removed a malicious app called 'SKR Claim' from the App Spotlight of its dApp Store on November 1 after it was live for about one hour, then patched the vulnerability that let it appear. [Crypto Briefing](https://cryptobriefing.com/solana-mobile-patches-bug-malicious-app-dapp-portal/) reported that the app collected seed phrases from users who believed they were claiming an airdrop.\n\n## How The SKR Claim App Reached The Spotlight\n\nSomeone gained unauthorized access to the dApp Publishing Portal and used it to surface an unpublished app in a curated section of the store, according to Crypto Briefing. The flaw allowed apps that had never been formally published to appear in spotlight features. Solana Mobile's engineers patched the vulnerability after the incident and the company began removing the app from affected user devices.\n\nSolana Mobile said the breach did not compromise device security, the Seed Vault hardware wallet or any on-chain systems. The company said its team never asks users for seed phrases or wallet connections as part of any airdrop process. Users who downloaded 'SKR Claim' on November 1 and entered a seed phrase should treat that wallet as compromised and move funds to a new wallet with a fresh seed phrase, while users who saw the app without interacting with it are not at risk, the company said.\n\n## Solana Mobile's Store Scale And Security Review\n\nSolana Mobile is a private San Francisco company that makes the Seeker smartphone and runs the Solana dApp Store, according to akta.pro [company records](https://akta.pro/company-data). The same records show the store reached 1,561 apps as of June 2026, up from about 750 three months earlier, and that more than 150,000 Seeker units had shipped as of June 2026. Solana Mobile has run a bug bounty program since August 2026 focused on the Seed Vault hardware wallet, and it is conducting a broader security review to catch similar gaps.\n\n## Earlier Milestones For The dApp Store\n\nCrypto Briefing reported on October 22, 2026 that the dApp Store hosted over 1,500 decentralized applications, up from about 700 in March 2026, with 96 new apps added in the week leading to June 25. On October 16, 2026, Analytics Insight described the Seeker's hardware-backed Seed Vault, which isolates private keys in a trusted execution environment with fingerprint and double-tap approval. Solana Mobile announced Ledger as its first hardware expansion partner at Ledger Op3n 2026 in Paris, PR Newswire reported on October 15, 2026, with the dApp Store and wallet to be combined into one Seeker app integrated with Ledger Atom.\n\n## What Comes Next For Seeker Users\n\nSolana Mobile is continuing to wipe the app from devices belonging to users who may have downloaded it during the one-hour window. The company has not said whether the vulnerability fell within the scope of its Seed Vault bug bounty program.\n","publisher":{"name":"News for Agent","url":"https://newsforagent.com"}}