{"investigation":{"slug":"step-finance","entity_name":"Step Finance","trust_score":22,"severity_base":null,"score_modifier":40,"confidence":0.82,"status":"draft","content_type":"investigation","summary":"Step Finance was a Solana-based DeFi portfolio tracker and analytics dashboard founded in 2021, often described as the 'front page of Solana,' with approximately 300,000–350,000 monthly active users at its peak. On January 31, 2026, attackers compromised devices belonging to members of the executive team, gaining access to treasury and fee wallets and draining an estimated $27–40 million in digital assets. Unable to secure refinancing or an acquisition, the team announced a permanent shutdown on February 23, 2026, alongside affiliated projects SolanaFloor and Remora Markets.","sections":[{"content":"Step Finance was founded in February 2021 following the Solana DeFi Hackathon and officially launched on April 25, 2021. The platform aggregated liquidity pool tokens, yield farms, staking positions, and user holdings across approximately 95% of Solana-based protocols into a single dashboard interface. It earned a reputation as the primary portfolio management interface for Solana users and at its peak reported approximately 300,000–350,000 monthly active users. The native STEP token functioned as a utility and governance token; stakers received xSTEP entitling them to a share of protocol fees collected from the open market. The project also operated SolanaFloor, a Solana-focused media and NFT analytics outlet, and in 2021 acquired Remora Markets, a lending and yield optimization protocol that issued rTokens backed one-to-one by USDC.","heading":"Background and Platform Overview","sources":[{"url":"https://solanacompass.com/projects/step-finance","name":"Step Finance on Solana: Project Review, Programs, Token, Metrics — Solana Compass","type":"research","credibility":2},{"url":"https://cointelegraph.com/news/step-finance-solanafloor-remora-markets-wind-down-operations","name":"Step Finance Shuts Down After $40 Million Hack — CoinTelegraph","type":"news_article","credibility":2},{"url":"https://decrypt.co/358970/solana-defi-project-step-finance-to-wind-down-weeks-after-29m-hack","name":"Solana DeFi Project Step Finance to Wind Down Weeks After $29M Hack — Decrypt","type":"news_article","credibility":2}],"severity":"low"},{"content":"On January 31, 2026, during APAC hours, Step Finance disclosed that several treasury and fee wallets had been compromised by what the team described as a 'sophisticated actor.' Blockchain security firm CertiK confirmed on-chain that approximately 261,854 SOL tokens were unstaked and transferred to attacker-controlled addresses during the incident. At prevailing prices, CertiK valued the initial theft at approximately $27–30 million. Step Finance's own post-incident accounting placed total losses across all affected assets at approximately $40 million, accounting for additional positions beyond SOL. The platform's smart contracts were not the vector of attack; the breach instead exploited off-chain operational security weaknesses. The team stated user funds held on the platform were not the primary target, with treasury and fee wallets bearing the losses.","heading":"The January 31, 2026 Security Breach","sources":[{"url":"https://www.coindesk.com/business/2026/01/31/solana-based-defi-platform-step-finance-hit-by-usd30-million-treasury-hack-as-token-price-craters","name":"Solana DeFi platform Step Finance hit by $27 million treasury hack as token price craters — CoinDesk","type":"news_article","credibility":1},{"url":"https://cryptonews.com/news/30m-stolen-as-step-finance-treasury-wallets-compromised/","name":"$30M Stolen as Step Finance Treasury Wallets Compromised — CryptoNews","type":"news_article","credibility":2},{"url":"https://bingx.com/en/news/post/step-finance-reports-treasury-breach-sol-m-stolen-jan","name":"Step Finance Reports Treasury Breach, 261,854 SOL Stolen Jan 31, 2026 — BingX News","type":"news_article","credibility":2},{"url":"https://www.tomshardware.com/tech-industry/cyber-security/usd40-million-worth-of-crypto-stolen-from-step-finance-hackers-compromise-executives-devices-to-gain-illicit-access","name":"$40 million worth of crypto stolen from Step Finance — hackers compromise executives' devices — Tom's Hardware","type":"news_article","credibility":2}],"severity":"critical"},{"content":"Step Finance attributed the breach to the compromise of devices belonging to members of the executive team, rather than to any vulnerability in the protocol's smart contract code. The team described the attack as exploiting a 'well-known attack vector' but did not publicly disclose specific technical details about the method of device infiltration or the identity of the perpetrators. Available reporting suggests the likely mechanism involved social engineering, targeted phishing, or malware deployment that exposed private keys or signing credentials controlling the treasury wallets. CertiK's on-chain analysis noted that stake authorization had been transferred prior to withdrawal, indicating the attacker had obtained full signing authority over the relevant wallets. Step Finance engaged external cybersecurity firms to assist with the investigation. No regulatory charges or attribution to a specific threat actor had been publicly confirmed as of the platform's February 2026 shutdown announcement.","heading":"Attack Vector: Executive Device Compromise","sources":[{"url":"https://www.halborn.com/blog/post/explained-the-step-finance-hack-january-2026","name":"Explained: The Step Finance Hack (January 2026) — Halborn","type":"research","credibility":2},{"url":"https://www.scworld.com/brief/step-finance-loses-40-million-in-executive-device-hack","name":"Step Finance loses $40 million in executive device hack — SC World","type":"news_article","credibility":2},{"url":"https://cryptopotato.com/the-end-of-step-finance-how-a-wallet-compromise-killed-the-solana-defi-aggregator/","name":"The End of Step Finance: How a Wallet Compromise Killed the Solana DeFi Aggregator — CryptoPotato","type":"news_article","credibility":2},{"url":"https://therecord.media/step-finance-cryptocurrency-theft-shutdown","name":"Crypto platform Step Finance shutting down after $40 million theft — The Record (Recorded Future News)","type":"news_article","credibility":1}],"severity":"critical"},{"content":"The question prompt and some secondary sources describe this incident as an 'AI agent compromise.' The characterization requires careful sourcing distinction. Primary and Tier 1 sources — including CoinDesk, The Record, SC World, and BleepingComputer — describe the incident solely as an executive device compromise that exposed private keys or signing credentials, with no mention of AI agents in the attack chain. Tier 2 and Tier 3 sources, including a Beam.ai analysis of 2026 AI agent security incidents, allege that Step Finance had integrated autonomous AI trading agents into its infrastructure, and that once attackers obtained device-level access, those agents amplified the damage by executing large SOL transfers autonomously without human approval thresholds. This framing holds that the root failure was overly permissive agent design: agents that could initiate large-value transactions without human-in-the-loop controls became a force multiplier for the initial device compromise. Step Finance's own public communications did not confirm or deny AI agent involvement in the incident. Claims about AI agent exploitation in this incident should therefore be treated as alleged and low-to-medium confidence, based predominantly on Tier 2–3 secondary analysis rather than primary disclosure.","heading":"AI Agent Involvement: Context and Alleged Role","sources":[{"url":"https://beam.ai/agentic-insights/ai-agent-security-breaches-2026-lessons","name":"5 Real AI Agent Security Breaches in 2026 and Their Lessons — Beam.ai","type":"research","credibility":3},{"url":"https://riskimmune.ai/blog/step-finance-defi-vendor-compromise-2026","name":"Step Finance DeFi Vendor Compromise 2026 — RiskImmune Blog","type":"community_report","credibility":3},{"url":"https://www.bleepingcomputer.com/news/security/step-finance-says-compromised-execs-devices-led-to-40m-crypto-theft/","name":"Step Finance says compromised execs' devices led to $40M crypto theft — BleepingComputer","type":"news_article","credibility":1},{"url":"https://www.govinfosecurity.com/cryptohack-roundup-step-finance-shuts-down-after-exploit-a-30855","name":"Cryptohack Roundup: Step Finance Shuts Down After Exploit — GovInfoSecurity","type":"news_article","credibility":2}],"severity":"high"},{"content":"Following the January 31, 2026 disclosure, the STEP token lost over 80% of its value within the first 24 hours. By the time the shutdown was announced on February 23, 2026, STEP had declined approximately 96% from its pre-hack price, and fell a further 36% in the 24 hours following the closure announcement. At the time of the shutdown announcement, STEP was trading at approximately $0.00057, compared to its all-time high of $10.20 reached in August 2021. The STEP token collapse directly eroded the value of the buyback program the team had committed to, as the buyback was anchored to a pre-hack snapshot valuation rather than post-crash market prices. The SOL stolen by the attacker, valued at approximately $27–30 million at time of theft, represented a significant portion of the protocol treasury and effectively rendered the platform unable to sustain operations.","heading":"Token Price Collapse and Market Impact","sources":[{"url":"https://www.coindesk.com/business/2026/02/24/step-finance-shuts-operations-after-usd27-million-january-hack","name":"Step Finance shuts operations after $27 million January hack — CoinDesk","type":"news_article","credibility":1},{"url":"https://www.ainvest.com/news/step-finance-hack-27m-liquidity-drain-token-collapse-2602/","name":"Step Finance Hack: A $27M Liquidity Drain and Token Collapse — AInvest","type":"news_article","credibility":2},{"url":"https://mojoauth.com/news/step-finance-hack-30m-stolen-step-token-plummets-90","name":"Step Finance Hack: $30M Stolen, STEP Token Plummets 90% — MojoAuth Pulse","type":"news_article","credibility":2}],"severity":"high"},{"content":"Following the theft, Step Finance worked with cybersecurity partners and leveraged Solana's Token22 protections to recover a portion of stolen assets. The team reported recovering approximately $3.7 million in Remora assets and approximately $1 million in other positions, bringing total recovered funds to approximately $4.7 million out of an estimated $40 million total loss — a recovery rate of approximately 12%. Remora Markets' rTokens were confirmed to remain fully backed on a one-to-one basis with USDC, and the team committed to a structured redemption process for rToken holders. The team explored financing options and potential acquisition of the platform or its subsidiary projects, but co-founder George Harrap stated the company was 'on a time crunch' and that while some parties had expressed interest, no viable deal was secured before operations ceased.","heading":"Recovery Efforts and Fund Recovery","sources":[{"url":"https://therecord.media/step-finance-cryptocurrency-theft-shutdown","name":"Crypto platform Step Finance shutting down after $40 million theft — The Record (Recorded Future News)","type":"news_article","credibility":1},{"url":"https://www.crowdfundinsider.com/2026/02/263817-step-finance-ceases-operations-following-40-million-security-incident/","name":"Step Finance Ceases Operations Following $40 Million Security Incident — Crowdfund Insider","type":"news_article","credibility":2},{"url":"https://beincrypto.com/solana-early-pillars-step-finance-solanafloor-shut-down/","name":"Early Solana Platforms Shutdown After Tragic Hack Stole Millions — BeInCrypto","type":"news_article","credibility":2}],"severity":"high"},{"content":"On February 23, 2026, Step Finance announced via X (formerly Twitter) the immediate wind-down of all operations. The team stated: 'Following the hack at the end of January, we explored every possible path forward, including financing and acquisition opportunities,' concluding they were 'unable to secure a viable outcome.' The shutdown encompassed three affiliated entities: Step Finance (DeFi dashboard and portfolio tracker), SolanaFloor (Solana-focused NFT analytics and media outlet), and Remora Markets (lending, yield optimization, and tokenized products protocol). A buyback program was announced for STEP token holders, using a snapshot of holdings and valuations taken prior to the January breach as the basis. Co-founder George Harrap described the closure as 'a difficult day' and stated his immediate priority was 'finding good roles for our excellent team.' The closure marked the end of one of the earliest and most prominent portfolio analytics interfaces in the Solana ecosystem.","heading":"Shutdown and Affiliated Project Closures","sources":[{"url":"https://www.coindesk.com/business/2026/02/24/step-finance-shuts-operations-after-usd27-million-january-hack","name":"Step Finance shuts operations after $27 million January hack — CoinDesk","type":"news_article","credibility":1},{"url":"https://cointelegraph.com/news/step-finance-solanafloor-remora-markets-wind-down-operations","name":"Step Finance Shuts Down After $40 Million Hack — CoinTelegraph","type":"news_article","credibility":2},{"url":"https://defi-planet.com/2026/02/step-finance-and-solanafloor-shuts-down-following-27-million-hack/","name":"Step Finance and SolanaFloor Shuts Down Following $27 Million Hack — DeFi Planet","type":"news_article","credibility":2},{"url":"https://decrypt.co/358970/solana-defi-project-step-finance-to-wind-down-weeks-after-29m-hack","name":"Solana DeFi Project Step Finance to Wind Down Weeks After $29M Hack — Decrypt","type":"news_article","credibility":2}],"severity":"critical"},{"content":"The Step Finance breach was one of the largest individual hacks of January 2026. According to CertiK's January 2026 security report, total losses across all DeFi exploits during the month reached approximately $370.3 million. The Step Finance incident is notable in the broader context of 2026 DeFi security discussions because it represents an attack on operational security infrastructure — specifically, the private key management practices of treasury operators — rather than a code-level exploit. Security researchers at Halborn and Assure DeFi cited the incident as a case study in the risk of inadequate endpoint security for teams managing large on-chain treasuries. Whether or not AI trading agents amplified the breach (see section above), the incident reinforced industry discussion about the risks of autonomous agents with broad signing permissions and insufficient human-in-the-loop controls for high-value transactions.","heading":"Broader Security Context","sources":[{"url":"https://www.halborn.com/blog/post/explained-the-step-finance-hack-january-2026","name":"Explained: The Step Finance Hack (January 2026) — Halborn","type":"research","credibility":2},{"url":"https://www.ccn.com/education/crypto/defi-hacks-2026-137m-lost-step-finance-truebit-resolv-exploits/","name":"400M+ Lost to DeFi Exploits in 2026 — CCN","type":"news_article","credibility":2},{"url":"https://www.assuredefi.com/blog/step-finance-hack-explained-40m-executive-device-breach","name":"Step Finance Hack Explained: How $40M Vanished in Minutes — Assure DeFi","type":"research","credibility":2}],"severity":"medium"}],"timeline":[{"date":"2021-02","event":"Step Finance founded following the Solana DeFi Hackathon.","source":"Solana Compass — Step Finance Project Review","source_url":"https://solanacompass.com/projects/step-finance","date_original":"2021-02-01"},{"date":"2021-04-25","event":"Step Finance officially launched on the Solana mainnet with STEP token and DeFi dashboard.","source":"STEP Tokenomics — Step Finance Medium","source_url":"https://stepfinance.medium.com/step-tokenomics-83825705cd8"},{"date":"2021-08","event":"STEP token reached its all-time high of approximately $10.20.","source":"CoinDesk — Step Finance shuts operations after $27 million January hack","source_url":"https://www.coindesk.com/business/2026/02/24/step-finance-shuts-operations-after-usd27-million-january-hack","date_original":"2021-08-01"},{"date":"2026-01-31","event":"Security breach detected during APAC hours. Attackers compromised executive team devices and drained approximately 261,854 SOL ($27–30 million) from treasury and fee wallets. Total losses later assessed at approximately $40 million.","source":"CoinDesk — Solana DeFi platform Step Finance hit by $27 million treasury hack","source_url":"https://www.coindesk.com/business/2026/01/31/solana-based-defi-platform-step-finance-hit-by-usd30-million-treasury-hack-as-token-price-craters"},{"date":"2026-01-31","event":"STEP token price falls over 80% within 24 hours of the breach disclosure. Step Finance engages external cybersecurity firms to assist with investigation.","source":"Step Finance Hack: $30M Stolen, STEP Token Plummets 90% — MojoAuth Pulse","source_url":"https://mojoauth.com/news/step-finance-hack-30m-stolen-step-token-plummets-90"},{"date":"2026-01-31","event":"CertiK confirms on-chain that 261,854 SOL was unstaked and transferred to attacker-controlled wallets; notes stake authorization was transferred prior to withdrawal.","source":"$30M Stolen as Step Finance Treasury Wallets Compromised — CryptoNews","source_url":"https://cryptonews.com/news/30m-stolen-as-step-finance-treasury-wallets-compromised/"},{"date":"2026-02","event":"Recovery efforts begin; team works with partners and leverages Token22 protections, eventually recovering approximately $4.7 million ($3.7M in Remora assets, $1M in other positions).","source":"Crypto platform Step Finance shutting down after $40 million theft — The Record","source_url":"https://therecord.media/step-finance-cryptocurrency-theft-shutdown","date_original":"2026-02-01"},{"date":"2026-02-23","event":"Step Finance, SolanaFloor, and Remora Markets announce permanent shutdown via X, stating they explored all financing and acquisition options but were unable to secure a viable outcome.","source":"Step Finance shuts operations after $27 million January hack — CoinDesk","source_url":"https://www.coindesk.com/business/2026/02/24/step-finance-shuts-operations-after-usd27-million-january-hack"},{"date":"2026-02-24","event":"STEP token falls a further 36% on the shutdown announcement day, reaching approximately $0.00057 — a 96%+ decline from pre-hack levels and over 99.99% below the August 2021 all-time high.","source":"Step Finance shuts operations after $27 million January hack — CoinDesk","source_url":"https://www.coindesk.com/business/2026/02/24/step-finance-shuts-operations-after-usd27-million-january-hack"}],"sources_used":[{"url":"https://www.coindesk.com/business/2026/01/31/solana-based-defi-platform-step-finance-hit-by-usd30-million-treasury-hack-as-token-price-craters","name":"Solana DeFi platform Step Finance hit by $27 million treasury hack as token price craters — CoinDesk","type":"news_article","archive_url":"http://web.archive.org/web/20260712175323/https://www.coindesk.com/business/2026/01/31/solana-based-defi-platform-step-finance-hit-by-usd30-million-treasury-hack-as-token-price-craters","credibility":1,"archive_timestamp":"2026-07-12T17:53:23+00:00"},{"url":"https://www.coindesk.com/business/2026/02/24/step-finance-shuts-operations-after-usd27-million-january-hack","name":"Step Finance shuts operations after $27 million January hack — CoinDesk","type":"news_article","archive_url":"http://web.archive.org/web/20260527132550/https://www.coindesk.com/business/2026/02/24/step-finance-shuts-operations-after-usd27-million-january-hack","credibility":1,"archive_timestamp":"2026-05-27T13:25:50+00:00"},{"url":"https://therecord.media/step-finance-cryptocurrency-theft-shutdown","name":"Crypto platform Step Finance shutting down after $40 million theft — The Record (Recorded Future News)","type":"news_article","archive_url":"http://web.archive.org/web/20260516001108/https://therecord.media/step-finance-cryptocurrency-theft-shutdown","credibility":1,"archive_timestamp":"2026-05-16T00:11:08+00:00"},{"url":"https://www.bleepingcomputer.com/news/security/step-finance-says-compromised-execs-devices-led-to-40m-crypto-theft/","name":"Step Finance says compromised execs' devices led to $40M crypto theft — BleepingComputer","type":"news_article","archive_url":"http://web.archive.org/web/20260720142523/https://www.bleepingcomputer.com/news/security/step-finance-says-compromised-execs-devices-led-to-40m-crypto-theft/","credibility":1,"archive_timestamp":"2026-07-20T14:25:23+00:00"},{"url":"https://www.halborn.com/blog/post/explained-the-step-finance-hack-january-2026","name":"Explained: The Step Finance Hack (January 2026) — Halborn","type":"research","archive_url":"http://web.archive.org/web/20260517000124/https://www.halborn.com/blog/post/explained-the-step-finance-hack-january-2026","credibility":2,"archive_timestamp":"2026-05-17T00:01:24+00:00"},{"url":"https://www.scworld.com/brief/step-finance-loses-40-million-in-executive-device-hack","name":"Step Finance loses $40 million in executive device hack — SC World","type":"news_article","archive_url":"http://web.archive.org/web/20260204191247/https://www.scworld.com/brief/step-finance-loses-40-million-in-executive-device-hack","credibility":2,"archive_timestamp":"2026-02-04T19:12:47+00:00"},{"url":"https://www.tomshardware.com/tech-industry/cyber-security/usd40-million-worth-of-crypto-stolen-from-step-finance-hackers-compromise-executives-devices-to-gain-illicit-access","name":"$40 million worth of crypto stolen from Step Finance — Tom's Hardware","type":"news_article","archive_url":"http://web.archive.org/web/20260403115123/https://www.tomshardware.com/tech-industry/cyber-security/usd40-million-worth-of-crypto-stolen-from-step-finance-hackers-compromise-executives-devices-to-gain-illicit-access","credibility":2,"archive_timestamp":"2026-04-03T11:51:23+00:00"},{"url":"https://beincrypto.com/solana-early-pillars-step-finance-solanafloor-shut-down/","name":"Early Solana Platforms Shutdown After Tragic Hack Stole Millions — BeInCrypto","type":"news_article","archive_url":null,"credibility":2,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://decrypt.co/358970/solana-defi-project-step-finance-to-wind-down-weeks-after-29m-hack","name":"Solana DeFi Project Step Finance to Wind Down Weeks After $29M Hack — Decrypt","type":"news_article","archive_url":"http://web.archive.org/web/20260316182401/https://decrypt.co/358970/solana-defi-project-step-finance-to-wind-down-weeks-after-29m-hack","credibility":2,"archive_timestamp":"2026-03-16T18:24:01+00:00"},{"url":"https://cointelegraph.com/news/step-finance-solanafloor-remora-markets-wind-down-operations","name":"Step Finance Shuts Down After $40 Million Hack — CoinTelegraph","type":"news_article","archive_url":"http://web.archive.org/web/20260629045109/https://cointelegraph.com/news/step-finance-solanafloor-remora-markets-wind-down-operations","credibility":2,"archive_timestamp":"2026-06-29T04:51:09+00:00"},{"url":"https://cryptonews.com/news/30m-stolen-as-step-finance-treasury-wallets-compromised/","name":"$30M Stolen as Step Finance Treasury Wallets Compromised — CryptoNews","type":"news_article","archive_url":"http://web.archive.org/web/20260201134211/https://cryptonews.com/news/30m-stolen-as-step-finance-treasury-wallets-compromised/","credibility":2,"archive_timestamp":"2026-02-01T13:42:11+00:00"},{"url":"https://defi-planet.com/2026/02/step-finance-and-solanafloor-shuts-down-following-27-million-hack/","name":"Step Finance and SolanaFloor Shuts Down Following $27 Million Hack — DeFi Planet","type":"news_article","archive_url":"https://web.archive.org/web/20260724171536/https://defi-planet.com/2026/02/step-finance-and-solanafloor-shuts-down-following-27-million-hack/","credibility":2,"archive_timestamp":"2026-07-24T17:15:36+00:00"},{"url":"https://www.crowdfundinsider.com/2026/02/263817-step-finance-ceases-operations-following-40-million-security-incident/","name":"Step Finance Ceases Operations Following $40 Million Security Incident — Crowdfund Insider","type":"news_article","archive_url":null,"credibility":2,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.assuredefi.com/blog/step-finance-hack-explained-40m-executive-device-breach","name":"Step Finance Hack Explained: How $40M Vanished in Minutes — Assure DeFi","type":"research","archive_url":"http://web.archive.org/web/20260309022844/https://www.assuredefi.com/blog/step-finance-hack-explained-40m-executive-device-breach","credibility":2,"archive_timestamp":"2026-03-09T02:28:44+00:00"},{"url":"https://www.ainvest.com/news/step-finance-hack-27m-liquidity-drain-token-collapse-2602/","name":"Step Finance Hack: A $27M Liquidity Drain and Token Collapse — AInvest","type":"news_article","archive_url":null,"credibility":2,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.ccn.com/education/crypto/defi-hacks-2026-137m-lost-step-finance-truebit-resolv-exploits/","name":"400M+ Lost to DeFi Exploits in 2026 — CCN","type":"news_article","archive_url":"http://web.archive.org/web/20260327052525/https://www.ccn.com/education/crypto/defi-hacks-2026-137m-lost-step-finance-truebit-resolv-exploits/","credibility":2,"archive_timestamp":"2026-03-27T05:25:25+00:00"},{"url":"https://beam.ai/agentic-insights/ai-agent-security-breaches-2026-lessons","name":"5 Real AI Agent Security Breaches in 2026 and Their Lessons — Beam.ai","type":"research","archive_url":"http://web.archive.org/web/20260712175323/https://beam.ai/agentic-insights/ai-agent-security-breaches-2026-lessons","credibility":3,"archive_timestamp":"2026-07-12T17:53:23+00:00"},{"url":"https://riskimmune.ai/blog/step-finance-defi-vendor-compromise-2026","name":"Step Finance DeFi Vendor Compromise 2026 — RiskImmune Blog","type":"community_report","archive_url":"https://web.archive.org/web/20260725033454/https://riskimmune.ai/blog/step-finance-defi-vendor-compromise-2026","credibility":3,"archive_timestamp":"2026-07-25T03:34:54+00:00"},{"url":"https://bingx.com/en/news/post/step-finance-reports-treasury-breach-sol-m-stolen-jan","name":"Step Finance Reports Treasury Breach, 261,854 SOL Stolen Jan 31, 2026 — BingX News","type":"news_article","archive_url":"https://web.archive.org/web/20260724165519/https://bingx.com/en/news/post/step-finance-reports-treasury-breach-sol-m-stolen-jan","credibility":2,"archive_timestamp":"2026-07-24T16:55:19+00:00"},{"url":"https://solanacompass.com/projects/step-finance","name":"Step Finance on Solana: Project Review, Programs, Token, Metrics — Solana Compass","type":"research","archive_url":"http://web.archive.org/web/20251208002233/https://solanacompass.com/projects/step-finance","credibility":2,"archive_timestamp":"2025-12-08T00:22:33+00:00"}],"source_tags":["defillama"],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-sonnet-4-6","created_at":"2026-05-04T02:54:13.583832+00:00","updated_at":"2026-07-25T12:31:31.541292+00:00"}}