SOL mobile fake app incident | Mainnet operating normally | Manage risk below $92
I’m taking a defensive stance on SOL for now. I won’t turn a single security report into a claim that the mainnet has been breached, nor will I blindly buy the dip. On November 1, the official Solana Mobile account disclosed that a malicious third-party app called “SKR Claim” had been submitted to the Solana dApp Store. The app publishing portal was accessed without authorization, and the store’s featured listings and quest interface were altered. The app asked users for their seed phrases and was removed after appearing in the featured section for about an hour. The team said it had fixed the vulnerability that allowed incompletely published apps to be linked and was working to remove the app from devices where it had been installed. Binance News, which is verified by Binance, also reported the incident. These two sources confirm that “a security incident occurred in the store publishing process,” but there are currently no verifiable figures for the number of victims or the amount of losses, and I won’t make any up.
The incident affects the crypto market through trust: users may view a featured listing in an official store as a sign that an app has been vetted, but this time a fake app asking for seed phrases appeared there. Once a seed phrase has been given to an attacker, uninstalling the app does not make the original wallet safe again. Anyone who entered their seed phrase should create a wallet using a newly generated seed phrase and transfer any remaining assets as soon as possible. Meanwhile, Solana’s official status page shows the mainnet and RPC are operating normally, with no mainnet incident recorded on November 2. Store permissions, mobile wallet keys, and Solana mainnet consensus are separate layers. There is currently insufficient information to say that Seed Vault or the mainnet was compromised, and SOL’s every-dollar price move certainly shouldn’t be attributed to this incident.
The market has already shown an observable reaction: SOL/USD is currently around $91.9 on Kraken, with a 24-hour low of $91.46 and a high of $95.77, down from today’s open of $94.4. SOL remains among the six most-searched terms on Binance Square over the past six hours, showing that interest has risen—but that hasn’t stopped the price from weakening. Farside’s U.S. SOL fund table shows net outflows of $10.8 million on October 30. The November 2 row still shows a dash; the automatically calculated total of 0.0 cannot be treated as confirmed zero flows. Both the fund data and spot price tell me to focus on risk first. I can’t interpret “the app has been removed” as meaning the market has fully absorbed the impact. The key levels here are the intraday low of $91.5, today’s open at $94.4, and the intraday high of $95.8. If $91.5 breaks and the price fails to reclaim it, the rebound thesis weakens further. If officials later disclose broader wallet or on-chain impacts, the current view that the incident was “limited to the app publishing process” will also need to be reassessed.
If I were trading this myself, I’d stay out for now. The only direction I’d consider is a small spot long after confirmation; I absolutely wouldn’t open a highly leveraged short out of fear. I’d wait for the price to reclaim $94.4 and hold that level on a one-hour retest, with no new announcement from Solana Mobile indicating a wider impact, before risking no more than 3% of my total capital on a test position. The first target is $95.8, where I’d take half off; the second target is $98, where I’d exit the remainder in stages. The initial stop-loss is $91.3. If the price falls back below $93.5 after entry and stays there for an hour, I’d also close the position proactively. If there’s no entry signal within 24 hours, or a new official security notice is issued, I’ll scrap the entire plan and reassess. Discipline matters more than chasing a rebound.
#SOL
This is only my personal market commentary and does not constitute investment advice.
I’m taking a defensive stance on SOL for now. I won’t turn a single security report into a claim that the mainnet has been breached, nor will I blindly buy the dip. On November 1, the official Solana Mobile account disclosed that a malicious third-party app called “SKR Claim” had been submitted to the Solana dApp Store. The app publishing portal was accessed without authorization, and the store’s featured listings and quest interface were altered. The app asked users for their seed phrases and was removed after appearing in the featured section for about an hour. The team said it had fixed the vulnerability that allowed incompletely published apps to be linked and was working to remove the app from devices where it had been installed. Binance News, which is verified by Binance, also reported the incident. These two sources confirm that “a security incident occurred in the store publishing process,” but there are currently no verifiable figures for the number of victims or the amount of losses, and I won’t make any up.
The incident affects the crypto market through trust: users may view a featured listing in an official store as a sign that an app has been vetted, but this time a fake app asking for seed phrases appeared there. Once a seed phrase has been given to an attacker, uninstalling the app does not make the original wallet safe again. Anyone who entered their seed phrase should create a wallet using a newly generated seed phrase and transfer any remaining assets as soon as possible. Meanwhile, Solana’s official status page shows the mainnet and RPC are operating normally, with no mainnet incident recorded on November 2. Store permissions, mobile wallet keys, and Solana mainnet consensus are separate layers. There is currently insufficient information to say that Seed Vault or the mainnet was compromised, and SOL’s every-dollar price move certainly shouldn’t be attributed to this incident.
The market has already shown an observable reaction: SOL/USD is currently around $91.9 on Kraken, with a 24-hour low of $91.46 and a high of $95.77, down from today’s open of $94.4. SOL remains among the six most-searched terms on Binance Square over the past six hours, showing that interest has risen—but that hasn’t stopped the price from weakening. Farside’s U.S. SOL fund table shows net outflows of $10.8 million on October 30. The November 2 row still shows a dash; the automatically calculated total of 0.0 cannot be treated as confirmed zero flows. Both the fund data and spot price tell me to focus on risk first. I can’t interpret “the app has been removed” as meaning the market has fully absorbed the impact. The key levels here are the intraday low of $91.5, today’s open at $94.4, and the intraday high of $95.8. If $91.5 breaks and the price fails to reclaim it, the rebound thesis weakens further. If officials later disclose broader wallet or on-chain impacts, the current view that the incident was “limited to the app publishing process” will also need to be reassessed.
If I were trading this myself, I’d stay out for now. The only direction I’d consider is a small spot long after confirmation; I absolutely wouldn’t open a highly leveraged short out of fear. I’d wait for the price to reclaim $94.4 and hold that level on a one-hour retest, with no new announcement from Solana Mobile indicating a wider impact, before risking no more than 3% of my total capital on a test position. The first target is $95.8, where I’d take half off; the second target is $98, where I’d exit the remainder in stages. The initial stop-loss is $91.3. If the price falls back below $93.5 after entry and stays there for an hour, I’d also close the position proactively. If there’s no entry signal within 24 hours, or a new official security notice is issued, I’ll scrap the entire plan and reassess. Discipline matters more than chasing a rebound.
#SOL
This is only my personal market commentary and does not constitute investment advice.
