BlockBeats news, November 2 - Solana Mobile announced that a malicious third-party app named "SKR Claim" was recently submitted to the Solana dApp Store. Due to unauthorized access to the dApp publishing portal, the interface content of the app recommendation and task pages was tampered with. The app had requested users to enter their wallet seed phrases and was taken down approximately one hour after appearing on the app store's recommendation page. Currently, the team is removing the app from devices where it has been installed.
Solana Mobile stated that after investigation, the team discovered and fixed a vulnerability that could have caused apps that had not yet completed the publishing process to be displayed in association with other content, in order to prevent similar incidents from recurring. The official team also reminded users that the Solana Mobile team will never ask users to provide seed phrases or cryptocurrency, nor will it ask users to connect their wallets to other apps or websites in order to claim airdrops.
