Step Finance, a decentralized finance platform on the Solana blockchain, has officially announced the immediate wind-down of all its activities after a significant cybersecurity breach drained roughly $40 million from its treasury. The closure, revealed on February 23, 2026, also encompasses its affiliated projects, SolanaFloor and Remora Markets, marking the end of an influential chapter in Solana’s early ecosystem development.
Founded as a comprehensive portfolio tracking and analytics tool, Step Finance earned a reputation as the “front page of Solana.”
Users relied on its dashboard to monitor wallet holdings, yield farming positions, liquidity pools, and on-chain activities across the fast-growing network.
Over the years, the platform expanded its footprint by launching SolanaFloor, a dedicated media and analytics outlet covering NFT trends, DeFi updates, and ecosystem news, as well as Remora Markets, which focused on lending, yield optimization, and tokenized products.
At its peak, Step Finance served millions of users and played a vital role in onboarding newcomers to Solana’s DeFi landscape.
The security incident occurred on January 31, 2026, during APAC trading hours.
Attackers gained unauthorized access to multiple treasury and fee wallets by compromising devices belonging to members of the executive team.
Blockchain security firm CertiK initially flagged the withdrawal of approximately 261,854 SOL—valued at around $28–30 million at the time—but Step Finance’s internal review later confirmed total losses nearing $40 million across various assets.
Importantly, the breach did not involve any smart contract vulnerabilities; instead, it stemmed from operational weaknesses, including endpoint compromises on executive hardware.
The company managed to recover roughly $4.7 million through coordination with ecosystem partners and Solana’s Token-22 standards, yet the damage proved irreversible.
In the weeks following the hack, the team explored multiple recovery avenues, including emergency financing rounds and potential acquisition deals.
These efforts built on an earlier restructuring announced in November 2025, when Step Finance had already scaled back its core dashboard to prioritize SolanaFloor and Remora.
Despite exhaustive attempts, no sustainable solution materialized.
On February 23, the official X account posted the somber update: the organization had exhausted every option and decided to terminate operations effective immediately.
To mitigate user impact, Step Finance outlined preliminary compensation measures.
A buyback program for STEP token holders is in development, using a snapshot taken prior to the January breach to determine fair valuations.
For Remora Markets participants, all rTokens remain fully backed on a one-to-one basis, with a structured redemption process for USDC expected in the coming weeks.
Additional details on timelines and mechanics will be shared soon. SolanaFloor’s existing content, videos, and archives will remain accessible online, though no new material will be produced.
The announcement triggered an immediate market reaction.
The STEP token, already weakened by the initial hack, dropped more than 37% on the news, extending cumulative losses to nearly 97% from pre-incident levels.
This collapse reflected eroded confidence and further complicated any fundraising prospects.
The shutdown represents a stark reminder of the persistent risks facing crypto projects beyond on-chain code.
While Solana’s smart contracts proved resilient, the incident underscores the critical need for robust off-chain security practices, including hardware protection and key management protocols.
Industry observers have called for a detailed post-mortem to help prevent similar executive-device exploits in the future.
As one of Solana’s earliest infrastructure pillars fades, the broader ecosystem continues to evolve with new tools and platforms.
For longtime users and the millions who once relied on Step Finance’s suite of services, the closure signals both loss and transition. The team expressed deep gratitude to its community, stating confidence that the wind-down represents the most responsible path forward under the circumstances.