The Solana Mobile dApp Store was compromised by the malicious app SKR Claim; the vulnerability has been patched.

Solana Mobile reports that a malicious app, SKR Claim, was submitted to the Solana dApp Store. Attackers gained unauthorized access to the dApp Publishing Portal and modified the App Spotlight and Quests interfaces. The app then requested a mnemonic phrase. SKR Claim was removed from the dApp Spotlight after approximately one hour and is currently being removed from installed devices. The team has fixed the vulnerability that allowed links to incompletely released apps and reminds users that Solana Mobile will never request mnemonic phrases, crypto assets, or require wallet connections to claim airdrops.