Solana Mobile patches bug after malicious app appears in dApp Portal

Seeker owners who installed SKR Claim now have to manually check their devices and remove it themselves, since Solana Mobile's fix only strips the app from the Store and blocks future links rather than reaching into handsets already affected. Developers listed in the portal have to re-verify their own Spotlight and Quests entries weren't altered by the same unauthorized access. Solana Mobile itself has to explain how an app that was never fully published still surfaced in its top promotional slot.

A store that markets itself as more open than Apple's or Google's still relies on the same centralized review queue to keep malicious apps out, and this incident shows that queue can be breached from the inside rather than bypassed from the outside. Crypto-native distribution was supposed to remove gatekeepers, not just replace them with a smaller, less-tested one. A publishing portal with unauthorized access to its spotlight feed is a single point of failure dressed up as decentralization. (per cryptobriefing.com)

Watch whether Solana Mobile discloses how many Seeker devices actually installed SKR Claim before the November 1, 2026 takedown, since that figure determines whether this was a contained glitch or a wider compromise. Also watch whether the company publishes details of the unauthorized access itself, including how it reached the Publishing Portal, or whether the patch to the links bug is the full extent of the public explanation.