Solana Mobile Confirms Breach That Put Seed Phrases At Risk

Solana Mobile confirmed that unauthorized access to its dApp Publishing Portal allowed a malicious app to appear in the company’s App Spotlight, where it asked users for seed phrases.

The app was promoted through the portal’s featured placement and remained there for about one hour before it was removed. It misled users into supplying seed phrases, sensitive information that can put crypto wallet access at risk. The incident linked unauthorized changes to the portal with a direct request for users’ wallet credentials.

Solana Mobile said it patched vulnerabilities in the portal to prevent similar incidents. The fix focused on the publishing system that allowed the app to be promoted, after the malicious listing had been taken down.

The breach centers on the app distribution layer: the portal is used to publish decentralized applications and select apps for the App Spotlight. It shows how a compromise of a publishing process can place a malicious app in an official featured slot before users know there is a security problem.