Solana Mobile removed a malicious third-party application named 'SKR Claim' from its dApp Store in the early hours of November 2, Taiwan time, after the app spent roughly one hour in the store's App Spotlight recommendation section, according to a COINOTAG report.

During its brief appearance in the Spotlight section, the application asked users to enter their wallet seed phrase. As a recommendation section, App Spotlight gives featured apps prominent placement in front of users browsing the store. A seed phrase — also known as a recovery or mnemonic phrase — is the sequence of words from which a crypto wallet's private keys are derived. Because possession of the phrase effectively grants full control over the associated funds, entering it into an untrusted application exposes the wallet to being drained.

The Solana dApp Store is the application store built into Solana Mobile's crypto-enabled smartphones, including the Saga and Seeker handsets. Solana Mobile, a subsidiary of Solana Labs, the company associated with the Solana (SOL) blockchain, has positioned the store as a commission-free distribution channel for crypto-native decentralized applications (dApps), in contrast to mainstream mobile app stores such as Apple's App Store and Google Play, which typically apply stricter restrictions to blockchain-related software and require new apps to pass review before they can be listed.

Security guidance across the crypto industry consistently advises users never to share their seed phrase with any application, website, or individual, and to transfer assets to a freshly generated wallet as soon as possible if a phrase may have been compromised. That guidance applies regardless of where an application is distributed, meaning a seed-phrase request remains a red flag even when the app appears inside an official storefront listing.

The report was first published by COINOTAG on November 2, 2026: https://en.coinotag.com/solana-mobile-removes-malicious-skr-claim-app