---
title: Solana Mobile: attackers got into the dApp Publishing Portal and featured a fake "SKR Claim" app that asked for seed phrases | ctxsec
url: https://ctxsec.com/items/solana-mobile-dapp-store-skr-claim-seed-phrase-app-publishing-portal
description: "Solana Mobile says a malicious app called \"SKR Claim\" was submitted to the Solana dApp Store on Nov 1 and promoted in the App Spotlight and Quests UI after unauthorized access to the dApp Publishing Portal. It asked users for their seed phrases, was live in the Spotlight for one hour, and is being removed from devices. A bug that allowed linking to apps that weren't fully published has been patched."
status: "official (Solana Mobile on X, Nov 1)"
published: 2026-11-01
---

> Solana Mobile says a malicious app called "SKR Claim" was submitted to the Solana dApp Store on Nov 1 and promoted in the App Spotlight and Quests UI after unauthorized access to the dApp Publishing Portal. It asked users for their seed phrases, was live in the Spotlight for one hour, and is being removed from devices. A bug that allowed linking to apps that weren't fully published has been patched.

[← Cybersecurity News](/news) · [markdown](/items/solana-mobile-dapp-store-skr-claim-seed-phrase-app-publishing-portal.md)

official (Solana Mobile on X, Nov 1)

2026-11-01

### Solana Mobile: attackers got into the dApp Publishing Portal and featured a fake "SKR Claim" app that asked for seed phrases

Solana Mobile (maker of the Seeker phone) said on **Nov 1** that a malicious third-party app named **"SKR Claim"** was submitted to the Solana dApp Store, and that the App Spotlight and Quests UI were changed to feature it after **unauthorized access to the dApp Publishing Portal**. The app asked users to enter their seed phrases.

It was in the Spotlight for one hour before being pulled from the store and is being removed from devices that installed it. The team says it found and patched a bug that allowed linking to apps that were not fully published. It has not said how the portal was accessed or how many people entered a seed phrase.

**What to do:** anyone who typed a seed phrase into SKR Claim should treat that wallet as compromised and move funds to a new wallet with a new seed. Solana Mobile says it will never ask for a seed phrase or ask you to connect a wallet to claim an airdrop.

Sources: [Solana Mobile on X (Nov 1)](https://x.com/solanamobile/status/2116962140301266959)