Blog / News

A Fake App Almost Tricked Solana Seeker Owners Into Giving Up Their Seed Phrases

A Fake App Almost Tricked Solana Seeker Owners Into Giving Up Their Seed Phrases

A malicious "SKR Claim" app briefly appeared on Solana Seeker's official dApp Store, asking users for their seed phrases before being pulled an hour later.

One Hour Was All It Took

If you own a Solana Seeker phone, this one's for you. Solana Mobile just confirmed that a malicious app called "SKR Claim" made it onto the official dApp Store and sat there for about an hour before anyone caught it.

The app was designed to look like a legitimate way to claim SKR tokens, but what it actually wanted was your seed phrase — the one thing you should never, ever type into any app, official store or not. The team traced the problem back to a breach of the developer portal, which let the fake listing slip through review.

What Happened Next

Solana Mobile pulled the app as soon as it was flagged and says the underlying bug has been patched. Still, an hour on an "official" store is plenty of time for a bad actor to catch a few victims, so if you installed anything claiming to be an SKR claim tool recently, it's worth checking your wallet and moving funds to a fresh one just in case.

Official app stores aren't immune to this stuff. Hardware wallets and offline seed storage remain the safest bet.