stepfinance

Step Finance, a DeFi platform within the Solana ecosystem that brands itself as the “Home of Solana”, has disclosed a major security incident involving several of its treasury and fee-collection wallets. The breach is currently under investigation, according to an official statement released by the project team.
Nearly 262,000 SOL Unstaked and Transferred
On-chain data indicates that approximately 261,854 SOL were unstaked and moved shortly before the incident was publicly disclosed. With Solana (SOL) trading around $110, the total value of assets involved is estimated at approximately $29 million, based on assessments from blockchain security firm CertiK.
In a statement posted on X, Step Finance confirmed the breach:
“A security incident involving some of our treasury wallets occurred a few hours ago and we are actively investigating. More details will be shared as soon as possible.”
The team also called on blockchain security firms and investigators to assist with tracing the incident and identifying the root cause.
Root Cause Still Unknown
At the time of writing, Step Finance has not disclosed the underlying cause of the breach. It remains unclear whether the incident stemmed from:
a smart contract vulnerability,
compromised private keys,
access control failures,
or another attack vector.
Crucially, the project has not yet confirmed whether any user funds were affected, stating only that the known incident involves protocol-owned wallets.
STEP Token Collapses Amid Market Reaction
Following news of the security breach, STEP, the platform’s native token used for governance and staking rewards, experienced a sharp sell-off.
STEP is currently trading near $0.004
The token has fallen more than 80% within 24 hours
Step Finance operates a Solana validator node and has previously stated that 100% of validator revenue (after operational costs) is used to buy back STEP tokens, which are then distributed to xSTEP stakers. The recent incident has raised concerns about the sustainability of this mechanism in the short term.
Background: A Key Infrastructure Project on Solana
Launched in 2021, Step Finance is widely known as a portfolio visualization and analytics platform, aggregating:
LP tokens
yield farming positions
staking assets
and other DeFi exposures
across roughly 95% of protocols in the Solana ecosystem, all within a single dashboard.
Beyond its core product, Step Finance:
operates SolanaFloor, a Solana-focused news outlet
organizes the annual Solana Crossroads conference in Istanbul
In December 2024, the project acquired early-stage startup Moose Capital, later rebranded as Remora Markets, with the goal of enabling tokenized trading of major equities such as Nvidia and Tesla on Solana.
Part of a Broader Pattern of Solana-Related Security Incidents
The Step Finance breach adds to a growing list of security incidents affecting projects connected to the Solana ecosystem:
April 2025: Lending protocol Loopscale lost $5.8 million just two weeks after launch
August 2025: Decentralized credit platform CrediX suffered $4.5 million in losses after attackers gained control of a governance wallet
November 2025: South Korean exchange Upbit experienced a $37 million hack involving multiple Solana-based assets
According to Chainalysis’ year-end 2025 report, total digital asset theft exceeded $3.41 billion during the year. While DeFi-related losses remain below previous cycle peaks, security risks continue to be a major concern as total value locked (TVL) across the crypto market shows signs of recovery.
Disclaimer
This article is for informational purposes only and reflects a personal blog perspective. It does not constitute investment advice. Readers should conduct their own research before making any financial decisions. The author assumes no responsibility for any investment outcomes.
👉 Follow for more crypto news, on-chain insights, and DeFi security updates.
#StepFinance #solana

في الليلة الماضية، انخفض ذلك الخط الكبير بشكل حاد، حيث انخفض $BTC مباشرة دون 80,000، هل هذا ما يسمى بـ“عائد الثور السريع”？ لا تضحك. في هذا الانهيار في السوق، الأكثر سخرية ليس التوترات الجيوسياسية بين الولايات المتحدة وإيران، ولا تلك القصة القديمة عن الاحتياطي الفيدرالي التي تتعلق بكيفن واش، بل هو أن العلامة التجارية القديمة في نظام سولانا البيئي، Step Finance، قررت “التعري” في هذه اللحظة الحرجة.

تعرضت منصة Step Finance في نظام سولانا البيئي للاختراق من قبل هاكرز.
دعني أبدأ بالنقطة المهمة، تم اختراق Step Finance هذه المرة بمبلغ يزيد عن 26 مليون دولار (بعض البيانات تقول 30 مليون)، وهو ما يعد بمثابة رش الملح على جرح السوق الهش بالفعل. هذه ليست ثغرة معقدة في منطق العقود الذكية، بل البيانات على السلسلة تشير إلى أن محفظة الخزانة ومحفظة الرسوم تم إنهاؤهما مباشرة. لقد قام الهاكر بشكل متهور بتخليص 260,000 قطعة من $SOL ثم قام بتحويلها. ماذا يعني هذا؟ يعني أن هذه ليست جريمة ذات ذكاء عالٍ، بل هي إدارة سيئة للمفاتيح الخاصة أو ضعف في الأمن الداخلي.