In a significant development within the decentralized finance sector, Step Finance, a well-regarded platform on the Solana blockchain, has announced it will shut down all operations. This decision follows a notable security breach occurring at the end of January 2026, resulting in a $27 million theft. The cyberattack not only compromised Step Finance but also cast doubt over the future of affiliated platforms SolanaFloor and Remora Markets.
What Happened During the Attack?
On January 31, 2026, Step Finance confirmed a major cyberattack that compromised their treasury and fee wallets. An internal inquiry uncovered that criminals had accessed administrative devices, successfully draining 261,000 SOL tokens by moving them to unrecognized accounts. The breach dealt a heavy blow to the platform’s liquidity and reserves.
“Several of our treasury wallets were compromised a few hours ago; our investigation into the incident is ongoing,” Step Finance stated as the situation unfolded.
How Did the Company Respond?
The aftermath of the breach saw the STEP token‘s value drop precipitously, losing over 37% shortly after the incident and declining by a staggering 97% from its all-time high. In order to mitigate the damage for users, the company initiated a buyback plan based on token prices before the breach, alongside offering rToken holders at Remora Markets a 1:1 redemption of their assets.
Despite exploring potential salvaging measures, including acquisitions and bridge financing, by February 23, 2026, Step Finance concluded that sustainable recovery was not feasible, thus deciding to terminate operations entirely. Both SolanaFloor and Remora Markets will also discontinue their services, although SolanaFloor plans to maintain access to its content archive temporarily.
“It has been decided to shut down all operations of Step Finance, SolanaFloor, and Remora Markets. After exhausting all options—including funding and acquisition—following January’s attack, we unfortunately could not find a sustainable way to move ahead,” the team relayed through a company update.
The shutdown marks an abrupt end to Step Finance’s rapid expansion period, which saw it shift focus to large-scale “mega products” in late 2025, diverting resources from their dashboard and API offerings to projects like SolanaFloor and Remora Markets. Noteworthy achievements include Remora’s milestone of $110 million in trading volume of tokenized Nvidia and Tesla shares.
- A significant cyberattack led to a $27 million heist, draining 261,000 SOL tokens.
- In response, the STEP token saw a 97% decrease from peak value.
- Efforts for recovery through funding and acquisition proved unviable.
- Step Finance, SolanaFloor, and Remora Markets announced complete shutdowns.
The closure highlights enduring security challenges in DeFi treasury management, as enduring vulnerabilities continue unabated across the industry. Nonetheless, new innovations arise, such as Zora’s SocialFi project on Solana, featuring an “attention market” that allows users to trade trending topics, introducing a fresh digital interaction model amid the evolving blockchain ecosystem.
