Attackers gained unauthorized access to the dApp Publishing Portal and pushed a malicious third-party app named "SKR Claim" into the Solana dApp Store, Solana Mobile disclosed on X. The App Spotlight and Quests UI were updated to promote it.

The app asked users to enter their seed phrases and stayed live in the dApp Spotlight for one hour before removal.

Solana Mobile is now removing the app from devices where it was installed. The team said it found and patched a bug that allowed linking to apps that were not fully published.

Anyone who entered a seed phrase into the app should treat that wallet as compromised. Solana Mobile stressed it never asks for seed phrases, crypto or wallet connections to claim airdrops.