Fake Crypto Airdrop App Hit Official Store, Seed Phrases at Risk

Solana Mobile disclosed on November 1 that a malicious third-party app named SKR Claim was submitted to its dApp Store and requested that users provide recovery phrases, backup words capable of restoring a wallet. An intruder used access to the dApp Publishing Portal to place the app in App Spotlight and Quests for about an hour, and removal from installed devices was ongoing. Solana Mobile patched a bug allowing links to apps not fully published and said it never asks users for seed phrases, crypto, or wallet connections to claim airdrops. SKR is the ecosystem’s native token, and its first airdrop was claimed through Seeker’s built-in wallet after it opened in January. No install, victim or loss figures were given.