【Security Alert | A fake “Claim Airdrop” app was listed in the official Solana Mobile store for an hour】
Over the past few days, everyone’s been focused on security at major exchanges, but mobile has had its own incident—and this one was even more insidious: an app asking for your seed phrase was featured directly in the official Spotlight.
Here are the verifiable details (Solana Mobile’s official X account, 11/1; reported by TokenPost and The Defiant):
1) A malicious third-party app called “SKR Claim” was added to the Solana dApp Store. The attacker gained unauthorized access to the publishing dashboard and changed the App Spotlight and Quests listings.
2) The app asked users to enter their seed phrase. It was featured on Spotlight for about an hour before being taken down. The official team says it’s removing the app from devices where it was already installed.
3) The team found a vulnerability that could direct links to apps that hadn’t been fully released yet. It has been patched. The official statement: The team will never ask you for your seed phrase or coins, or ask you to connect another wallet or website to claim an airdrop.
My take:
There’s been a lot of “claim your SKR airdrop” messaging lately. What’s scary this time is that the entry point was Spotlight in the official store—not just some random phishing link. There’s only one rule: if anyone asks for your seed phrase, assume it’s a scam. Even when claiming a real airdrop, only use the entry point specified in the official documentation (the official team says it’s in Activity Tracking in Seed Vault Wallet). If you installed “SKR Claim” or entered your seed phrase, assume your wallet is compromised: create a new seed phrase and move your remaining assets immediately.
This is a summary of publicly available information and is not investment advice.
$SOLUSDT $BTCUSDT
#安全 #SolanaMobile #DailyHotTopics
Over the past few days, everyone’s been focused on security at major exchanges, but mobile has had its own incident—and this one was even more insidious: an app asking for your seed phrase was featured directly in the official Spotlight.
Here are the verifiable details (Solana Mobile’s official X account, 11/1; reported by TokenPost and The Defiant):
1) A malicious third-party app called “SKR Claim” was added to the Solana dApp Store. The attacker gained unauthorized access to the publishing dashboard and changed the App Spotlight and Quests listings.
2) The app asked users to enter their seed phrase. It was featured on Spotlight for about an hour before being taken down. The official team says it’s removing the app from devices where it was already installed.
3) The team found a vulnerability that could direct links to apps that hadn’t been fully released yet. It has been patched. The official statement: The team will never ask you for your seed phrase or coins, or ask you to connect another wallet or website to claim an airdrop.
My take:
There’s been a lot of “claim your SKR airdrop” messaging lately. What’s scary this time is that the entry point was Spotlight in the official store—not just some random phishing link. There’s only one rule: if anyone asks for your seed phrase, assume it’s a scam. Even when claiming a real airdrop, only use the entry point specified in the official documentation (the official team says it’s in Activity Tracking in Seed Vault Wallet). If you installed “SKR Claim” or entered your seed phrase, assume your wallet is compromised: create a new seed phrase and move your remaining assets immediately.
This is a summary of publicly available information and is not investment advice.
$SOLUSDT $BTCUSDT
#安全 #SolanaMobile #DailyHotTopics
