Synopsis: Three Solana-based platforms are shutting down after a $27 million treasury wallet exploit left the parent company unable to secure fresh funding or continue operations.
Step Finance to Wind Down Operations
Solana portfolio dashboard and DeFi aggregator Step Finance has announced it will cease operations after suffering a $27 million security breach. The decision also affects its affiliated projects SolanaFloor, Solana NFT Analytics, and Remora Markets all of which will be shut down.
Step Finance has been widely used as a portfolio tracker and DeFi interface for the Solana ecosystem, while SolanaFloor operated as an ecosystem media outlet and analytics platform. Remora Markets functioned as a lending and yield protocol.
Treasury Wallet Breach Triggered the Closure
The company confirmed that its treasury wallets were compromised in late January, leading to the loss of approximately 261,854 SOL. At the time of the attack, the stolen tokens were valued at around $27 million. Blockchain security firm CertiK reported that the funds were unstaked and moved during the exploit.
Following the incident, Step Finance engaged cybersecurity investigators and explored multiple recovery options, including fundraising, strategic sales, and potential acquisitions. However, the team said none of these efforts resulted in a viable path forward, forcing the immediate shutdown of operations.
Buyback and Redemption Plans for Users
Despite the closure, the team stated it is working on a buyback programme for STEP token holders. The compensation will be based on a snapshot of token balances taken prior to the hack. In addition, Remora users holding rTokens will be given a redemption process to reclaim available funds.
The company said these measures are intended to provide some relief to affected users, although the treasury loss significantly limits the scope of reimbursement.
STEP Token Price Collapse
The exploit had a severe impact on the value of the STEP token. The token fell by roughly 96% in the days following the hack and declined further after the shutdown announcement. It now trades at a small fraction of its previous value, far below its all-time high of $10.20 recorded in August 2021 during the peak of the previous crypto bull cycle.
Also Read: Crypto Users Beware: Uniswap Founder Sounds Alarm on Deadly Search Ad Scams
Broader Impact on Solana DeFi
The shutdown adds to the recent challenges facing the Solana DeFi ecosystem. Total value locked (TVL) on Solana has fallen sharply from its September peak, declining by around 52% to approximately $6.3 billion, according to DeFiLlama data.
SOL, the network’s native token, has also retreated from its earlier highs reached during the memecoin-driven rally in 2025. The combined effect of security incidents and weakening market conditions has increased pressure on smaller projects with limited financial buffers.
A Reminder of Security Risks in DeFi
The incident highlights the ongoing vulnerability of DeFi protocols to treasury-level exploits and the difficulty of recovering from large capital losses without external funding. For Solana-based projects, the event underscores the importance of treasury security, diversified funding sources, and risk management frameworks.
Written by Parvati Anilkumar
