WARNING: FAKE SKR CLAIM APP SNEAKS INTO SOLANA SEEKER’S DAPP STORE, ASKS FOR SEED PHRASE
According to an announcement by Solana Mobile on Nov. 1, an attacker gained unauthorized access to the dApp Publishing Portal and altered the App Spotlight and Quests interfaces. As a result, a malicious app called SKR Claim appeared in the App Spotlight section for about an hour and asked users to enter their seed phrases under the guise of claiming an airdrop.
Solana Mobile has removed the app from the store, is removing it from devices where it was installed, and has patched the vulnerability that allowed links to apps that had not been fully published. The team stressed that it will never ask for a seed phrase, crypto assets, or a wallet connection to another app or website to claim an airdrop.
A note of caution: according to reports, the incident did not compromise device security, the Seed Vault hardware wallet, or on-chain systems. However, Solana Mobile has not disclosed how many devices had the app installed, whether any funds were lost, or how the attacker accessed the publishing portal. Anyone who entered their seed phrase into this app should consider that wallet compromised and move their assets to a new, secure wallet as soon as possible.
👇 TRADE HOT COINS HERE 👇
$MITO
$SOPH
$TRUMP
According to an announcement by Solana Mobile on Nov. 1, an attacker gained unauthorized access to the dApp Publishing Portal and altered the App Spotlight and Quests interfaces. As a result, a malicious app called SKR Claim appeared in the App Spotlight section for about an hour and asked users to enter their seed phrases under the guise of claiming an airdrop.
Solana Mobile has removed the app from the store, is removing it from devices where it was installed, and has patched the vulnerability that allowed links to apps that had not been fully published. The team stressed that it will never ask for a seed phrase, crypto assets, or a wallet connection to another app or website to claim an airdrop.
A note of caution: according to reports, the incident did not compromise device security, the Seed Vault hardware wallet, or on-chain systems. However, Solana Mobile has not disclosed how many devices had the app installed, whether any funds were lost, or how the attacker accessed the publishing portal. Anyone who entered their seed phrase into this app should consider that wallet compromised and move their assets to a new, secure wallet as soon as possible.
👇 TRADE HOT COINS HERE 👇
$MITO
$SOPH
$TRUMP
