Step Finance, a popular Solana-based DeFi portfolio tracker, is shutting down following a major security breach. The company announced today that it will cease operations, along with SolanaFloor and Remora Markets, after a hack in January 2026 drained around $30 million in assets. Unlike smart contract vulnerabilities, the hack targeted compromised devices, exposing endpoint security risks in crypto infrastructure.
🚨 UPDATE: Step Finance, SolanaFloor, and Remora Markets confirms shutdown following its Jan. hack, with a buyback planned for STEP holders. pic.twitter.com/S6s6DKPP82
— Cointelegraph (@Cointelegraph) February 24, 2026
Step Finance Faces Major Loss After Hack
The breach involved the theft of 261,854 SOL, a significant hit to one of Solana’s key DeFi tools. Many users relied on Step Finance to track their portfolios and manage digital assets across multiple platforms. The incident highlights the risks associated with endpoints, such as personal devices and wallets, rather than flaws in the blockchain itself.
Buyback Program for STEP Token Holders
Despite the shutdown, Step Finance is offering a buyback program for STEP token holders. The program uses a pre-hack snapshot to calculate recoverable funds. While this will not fully replace lost assets, it demonstrates the team’s commitment to its community. The initiative aims to provide partial recovery and maintain trust among loyal users even as the project winds down.
Lessons for Solana Users
This STEP hack serves as a stark reminder of security risks in the crypto ecosystem. Users must remain vigilant, securing devices and wallets carefully, and consider endpoint vulnerabilities when interacting with DeFi platforms. For Solana and other blockchains, incidents like this emphasize the importance of robust security measures beyond smart contracts.
Step Finance’s Closure and Community Impact
In short, the closure of Step Finance, SolanaFloor, and Remora Markets marks a major shakeup in the Solana DeFi ecosystem. While the buyback program offers some relief, the event underscores the growing need for stronger security protocols and risk awareness. Communities and investors alike will be watching closely to see how Solana-based tools recover from this loss.
