Solana Solana Mobile removes malicious app "SKR Claim" and fixes publishing portal vulnerability
BIBIBI
AT A GLANCE
Solana Solana Mobile said it has removed the malicious app "SKR Claim," which induced users to enter seed phrases, and fixed the related vulnerability.
Article
Solana Solana Mobile removes malicious app "SKR Claim," which had induced users to enter their seed phrases
According to BlockBeats,November 2，Solana Solana Mobile stated that a malicious third-party app named "SKR Claim" was recently submitted to the Solana dApp Store. As the dApp publishing portal was accessed without authorization, the interface content on the app recommendations and task pages was tampered with. The app had asked users to enter their wallet seed phrases and was removed approximately 1 hours after appearing on the app store's recommendations page. The team is currently removing the app from devices on which it was installed.Solana Solana Mobile stated that, following an investigation, the team identified and fixed a vulnerability that could have caused apps that had not completed the publishing process to be displayed in association with other content, in order to prevent similar incidents from recurring. Officials also reminded users that the Solana Solana Mobile team will never ask users to provide seed phrases or cryptocurrency, nor will it ask users to connect their wallets to other apps or websites in order to claim an airdrop.
Original link https://m.theblockbeats.info/flash/374931
Key points
01
Solana Solana Mobile stated that the malicious third-party app "SKR Claim" was recently submitted to the Solana dApp Store.
02
Solana Solana Mobile said that the dApp publishing portal was accessed without authorization, and the interface content on the app recommendations and task pages was tampered with.
03
The app had asked users to enter their wallet seed phrases and was removed approximately 1 hours after appearing on the recommendations page.
04
The team is removing the app from devices on which it was installed.
05
Solana Solana Mobile stated that the team identified and fixed a vulnerability that could have caused apps that had not completed the publishing process to be displayed in association with other content.
06
Solana Solana Mobile reminded users that its team will never ask for seed phrases or cryptocurrency, nor will it ask users to connect to other apps or websites to claim an airdrop.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
A seed phrase is effectively the core credential controlling a wallet. Any app that requests a seed phrase should be regarded as a high-risk signal. In this incident, the malicious app briefly appeared on the app store's recommendations page but has since been removed.
Why it matters to readers
If users submit seed phrases to a malicious app, wallet security may be compromised; the incident also exposes security risks in the app publishing portal and recommendation display processes.
Do not provide seed phrases to any app, website, or purported official representative. If you are asked to enter a seed phrase, transfer cryptocurrency, or connect to an unfamiliar app in order to claim an airdrop, stop immediately.
Risks and unknowns
The original text did not specify how many devices installed the app.
The original text did not specify whether any users had already submitted seed phrases.
The original text did not specify whether any crypto asset losses occurred.
The relevant information primarily comes from Solana Mobile's statements, and the evidence contains no independent verification results.
It is unknown whether the team has completed removing the app from installed devices.
Related Developments
Loading event timeline…
Related concepts
Seed phrase
An ordered sequence of words used to recover private keys. Never provide it to customer support or unfamiliar websites.
A method of distributing digital assets free of charge to members of the public who meet conditions such as holding assets or demonstrating address activity.
