Solana Mobile removes malicious seed-phrase app after publishing portal breach
Solana Mobile patched a bug in its dApp Publishing Portal after unauthorized access allowed a fraudulent app to be featured in the store and prompt users for their seed phrases.
Solana Mobile announced that unauthorized access to its dApp Publishing Portal compromised its dApp Store interface, allowing the App Spotlight and Quests UI to promote a malicious third-party app called "SKR Claim." The fraudulent application prompted users to enter their wallet seed phrases.[3][2]
The malicious app remained live on the dApp Spotlight for approximately one hour before the team removed it from the store. Solana Mobile stated that the app is also being uninstalled from devices that had downloaded it.[3][2]
Following an internal review, developers identified and deployed a fix for a bug that permitted the interface to link to apps that were not yet fully published. Solana Mobile reminded users that its team will never ask for seed phrases, request cryptocurrency, or require users to connect wallets to external applications to claim airdrops.[3][1]
Key facts
- Unauthorized access to Solana Mobile's dApp Publishing Portal led to updates on the App Spotlight and Quests UI.
- The compromised UI promoted a malicious third-party app named "SKR Claim" that prompted users for their seed phrases.
- The fraudulent app remained live on the dApp Spotlight for one hour before removal from the store.
- Solana Mobile is actively removing the malicious app from devices where it had been installed.
- The team patched a bug that allowed links to apps that were not fully published.
Sources · 3 sources
- CB
Crypto BriefingArticle ·
Solana Mobile patches bug after malicious app appears in dApp Portal Solana Mobile's incident highlights the critical need for robust security measures in decentralized app ecosystems to prevent future breaches. The post Solana Mobile patches bug after malicious app appears in dApp Portal appeared first on Crypto Briefing .
Open source - CO
Cointelegraph@CointelegraphPost on X ·
🚨 LATEST: Solana’s Seeker says a malicious “SKR Claim” app that asked for user seed phrases went live on its dApp Store for an hour after a breach of its developer portal. The team has since pulled the app and patched the bug. https://t.co/4cCL5SuPFu
Open source - SO
SolanaFloor@SolanaFloorPost on X ·
JUST IN: @solanamobile says unauthorized access to its dApp Publishing Portal allowed changes to the App Spotlight and Quests UI, which promoted a malicious “$SKR Claim” app requesting users’ seed phrases. The app appeared in Spotlight for one hour before removal. The team says they have patched a bug that allowed links to apps that were not fully published to mitigate this from happening again.
Open source