Medium Frontend infra hack Source: Crypto Briefing

Solana Mobile patches bug after malicious app appears in dApp Portal

Solana Mobile patched a vulnerability in its dApp Publishing Portal after a malicious app, 'SKR Claim,' was briefly available in the App Spotlight for about an hour on November 1, 2026. The fake airdrop app was designed to steal user seed phrases. Solana Mobile confirmed that device security, the Seed Vault, and on-chain systems were not compromised, and they are actively removing the app from affected devices.

Protocols
Solana Mobile
Chains
Solana
Confidence
High
First seen
1 Nov 2026, 19:00 UTC

Read the original report ↗ (opens in a new tab)