Solana Mobile removes fake dApp Store app live for one hour
Unauthorised portal access allowed a fake application requesting wallet seed phrases onto the spotlight page before engineers patched the vulnerability.
Key takeaways
- 1Solana Mobile removed a fake app called SKR CLAIM that sat on its spotlight page for one hour on 1 November 2026.
- 2The malicious application asked users for seed phrases before engineers patched the flaw and began remote device wipes.
- 3Solana (SOL) traded down 1.4 percent at $94.65 with a $55.9 billion market value following the report.
Solana Mobile removed a malicious software application named SKR CLAIM from its storefront on 1 November 2026 after unauthorised portal access allowed the program to appear on the dApp Store spotlight section for one hour. The software targeted mobile hardware users by attempting to extract wallet credentials.
Degen News reported that the fake application prompted users to input their secret recovery seed phrases. Solana Mobile confirmed that the app has been removed from the official directory, is currently being remotely wiped from user devices, and that engineers have patched the underlying portal flaw that enabled the breach.
The dApp Store provides mobile access to decentralized protocols on the Solana network, operating as an alternative to traditional mobile app distribution systems. Data from YourKhabri shows Solana's native cryptocurrency, SOL, traded down 1.4 percent at $94.65 on 1 November 2026, giving the token a total market valuation of $55.9 billion.
Unauthorised access to official app distribution channels poses direct risks to mobile wallet users, as compromised seed phrases give attackers full access to wallet balances. Token holders and Solana Mobile device owners will watch for further updates from the developer team on whether any user funds were stolen during the one-hour window.
Also reported by
Reported and edited by the YourKhabri desk under our editorial policy. Nothing here is investment advice.