A malicious third-party app named "SKR Claim" appeared in the Solana dApp Store, prompting users to enter their seed phrases. The app was displayed in the dApp Spotlight for approximately one hour before being removed and is now being purged from installed devices. Attackers gained unauthorized access to the dApp Publishing Portal and modified the App Spotlight and Quests interfaces to distribute the fraudulent app. Solana Mobile has patched the vulnerability that allowed linking to incompletely published apps. Solana Mobile emphasized that it will never ask users for seed phrases or crypto assets, nor request wallet connections to claim airdrops.