{"investigation":{"slug":"step-finance-hack-shutdown-2026","entity_name":"Step Finance Hack and Shutdown","trust_score":6,"severity_base":null,"score_modifier":-6,"confidence":0.88,"status":"published","content_type":"investigation","summary":"Step Finance, a Solana-based DeFi portfolio tracking dashboard founded in 2021, suffered a treasury breach on January 31, 2026, when attackers compromised executive team devices, took over staking authority on the protocol's staked SOL and drained approximately 261,854 SOL (about $27.3 million at the time), with total losses across all affected assets later reported at around $40 million. Unable to secure financing or an acquisition, Step Finance and its affiliated platforms SolanaFloor and Remora Markets announced permanent closure on February 24, 2026; the STEP token lost roughly 96–97% of its pre-hack value and was later delisted by Kraken.","sections":[{"content":"Step Finance was a Solana-based DeFi portfolio tracker and analytics platform founded in 2021 by George Harrap, originating from a Solana hackathon in February 2021. The platform began as a dollar-cost averaging (DCA) contract before pivoting to become the primary portfolio management and DeFi aggregation dashboard for the Solana ecosystem, allowing users to visualize, analyze, and execute transactions across multiple Solana protocols from a single interface; it eventually covered approximately 95% of Solana protocols. In April 2021, Step Finance raised $2 million in a seed round led by Alameda Research, with participation from 3 Commas Capital, Raydium, One Block, and Solidity Ventures. Co-founder George Harrap is described as a long-time crypto entrepreneur with roots in Bitcoin mining since 2011 and a prior crypto remittance venture. Step Finance expanded through acquisitions: SolanaFloor (an NFT analytics and media outlet focused on the Solana ecosystem) and Remora Markets (a tokenized real-world asset and lending protocol). The protocol operated a Solana validator node and used validator earnings to fund STEP token buybacks, linking treasury health to token economics. At its peak the platform reported up to 350,000 monthly active users, and the STEP governance token reached an all-time high of approximately $10.20 in August 2021.","heading":"Background: Step Finance and the Solana Ecosystem","sources":[{"url":"https://www.coindesk.com/business/2021/04/13/solana-dashboard-step-finance-raises-2m-from-alameda-research-3-commas","name":"CoinDesk: Step Finance Raises $2M From Alameda Research, 3 Commas","type":"news_article","credibility":1},{"url":"https://thedefiant.io/news/defi/step-finance-raises-2m-in-round-led-by-alameda-research","name":"The Defiant: Step Finance Raises $2M in Round Led by Alameda Research","type":"news_article","credibility":2},{"url":"https://cointelegraph.com/news/step-finance-solanafloor-remora-markets-wind-down-operations","name":"CoinTelegraph: Step Finance, SolanaFloor, Remora Markets Wind Down","type":"news_article","credibility":1},{"url":"https://solanacompass.com/projects/step-finance","name":"Step Finance on Solana: Project Review — Solana Compass","type":"other","credibility":2},{"url":"https://www.crunchbase.com/person/george-harrap-e876","name":"George Harrap — Co-Founder of Step Finance — Crunchbase","type":"other","credibility":2},{"url":"https://www.coindesk.com/business/2026/01/31/solana-based-defi-platform-step-finance-hit-by-usd30-million-treasury-hack-as-token-price-craters","name":"CoinDesk: Step Finance Hit by $30 Million Treasury Hack","type":"news_article","credibility":1}],"severity":"low"},{"content":"On January 31, 2026, during APAC trading hours, attackers gained unauthorized access to several Step Finance treasury and fee-collection wallets. Step Finance disclosed the breach publicly on X (formerly Twitter), describing the perpetrator as \"a sophisticated actor\" and the method as \"a well-known attack vector,\" without initially specifying the exact method. Step Finance confirmed on February 2, 2026 that the root cause was the compromise of devices belonging to members of the executive team. Attackers are alleged to have obtained access through phishing, social engineering or targeted malware, enabling the exfiltration of private keys or signing credentials. This gave the attacker control over the cryptographic material needed to authorize staking and withdrawal operations on behalf of the protocol. The breach did not involve a smart contract vulnerability or flash loan; it was an off-chain operational security failure. Using the stolen credentials, the attacker changed the staker authority and withdrawer authority on the protocol's staked SOL positions to attacker-controlled wallets, which enabled the unstaking and withdrawal of SOL without triggering smart-contract-level defenses.","heading":"The January 2026 Hack: Executive Device Compromise","sources":[{"url":"https://www.coindesk.com/business/2026/01/31/solana-based-defi-platform-step-finance-hit-by-usd30-million-treasury-hack-as-token-price-craters","name":"CoinDesk: Step Finance Hit by $30 Million Treasury Hack","type":"news_article","credibility":1},{"url":"https://www.tradingview.com/news/cointelegraph:f91785969094b:0-step-finance-treasury-wallets-breached-27m-in-sol-drained-as-step-crashes-90/","name":"Step Finance treasury wallets breached, $27M in SOL drained as STEP crashes 90% — CoinTelegraph via TradingView","type":"news_article","credibility":2},{"url":"https://rekt.news/step-finance-rekt","name":"Rekt News: Step Finance Rekt","type":"research","credibility":2},{"url":"https://www.halborn.com/blog/post/explained-the-step-finance-hack-january-2026","name":"Halborn: Explained — The Step Finance Hack (January 2026)","type":"research","credibility":2},{"url":"https://www.bleepingcomputer.com/news/security/step-finance-says-compromised-execs-devices-led-to-40m-crypto-theft/","name":"Step Finance says compromised execs' devices led to $40M crypto theft — BleepingComputer","type":"news_article","credibility":2},{"url":"https://www.tomshardware.com/tech-industry/cyber-security/usd40-million-worth-of-crypto-stolen-from-step-finance-hackers-compromise-executives-devices-to-gain-illicit-access","name":"Tom's Hardware: $40 Million Stolen From Step Finance After Executive Device Compromise","type":"news_article","credibility":2},{"url":"https://www.technewshub.co.uk/post/step-finance-drained-40-million-worth-of-crypto-stolen-in-executive-device-heist","name":"Step Finance drained: $40 million worth of crypto stolen in executive device heist — TechNewsHub","type":"news_article","credibility":3}],"severity":"critical"},{"content":"Blockchain security firm CertiK flagged the unusual movement of staked SOL in real time and confirmed that 261,854 SOL was unstaked and transferred from Step Finance-controlled wallets to attacker-controlled addresses. On-chain analysis identified the primary attacker authorization wallet as LEP1uHXcWbFEPwQgkeFzdhW2ykgZY6e9Dz8Yro6SdNu, a fresh wallet to which stake authorization for the treasury SOL was transferred, and a secondary wallet at 7raxiejD8hDUH1wyYWFDPrEuHiLUjJ4RiZi2z1u2udNh. Changing the staker and withdrawer authority of the stake accounts is a prerequisite on Solana for unstaking and withdrawing delegated SOL. Two key transactions have been identified in post-incident analyses: the unstaking transaction (signature: 5EeXqPQci3ZnbFGWPJf622cLqLGnMuNcAr1rDGCizKRFt9owawCzovNpBC4xNh7A4a5p7Qkvsg8nPaYmw3MiYCvF) and the main withdrawal of 261,932 SOL (signature: 4Ly35PsVTBNPVibpDRww6FC43pU5Tuw6UtaKECzcLKXtWTPyyvw1dw8LoNRLBDMgQUP81nN69mhiAEDJvzL8X317). Reports differ on the amount of SOL: 261,854 SOL is the figure attributed to CertiK, while the withdrawal transaction identified by Rekt News moved 261,932 SOL. The stolen SOL was transferred to unknown external addresses and initially remained visible on-chain without immediate bridge transfers or mixing service usage. The attacker's identity has not been publicly confirmed by law enforcement.","heading":"On-Chain Forensics","sources":[{"url":"https://rekt.news/step-finance-rekt","name":"Rekt News: Step Finance Rekt","type":"research","credibility":2},{"url":"https://www.coindesk.com/business/2026/01/31/solana-based-defi-platform-step-finance-hit-by-usd30-million-treasury-hack-as-token-price-craters","name":"CoinDesk: Step Finance Hit by $30 Million Treasury Hack","type":"news_article","credibility":1},{"url":"https://bitcoinethereumnews.com/tech/step-finance-hack-27m-sol-stolen-step-crashes-93/","name":"Step Finance Hack: $27M SOL Stolen, STEP Crashes 93% — Bitcoin Ethereum News","type":"news_article","credibility":3},{"url":"https://www.tradingview.com/news/cointelegraph:f91785969094b:0-step-finance-treasury-wallets-breached-27m-in-sol-drained-as-step-crashes-90/","name":"Step Finance treasury wallets breached, $27M in SOL drained as STEP crashes 90% — CoinTelegraph via TradingView","type":"news_article","credibility":2}],"severity":"critical"},{"content":"Reported losses vary with methodology. The SOL drained was valued at approximately $27.3 million at the time of the theft (CoinDesk; CoinTelegraph via TradingView), with CoinDesk's reporting citing roughly $27–30 million. Step Finance's internal review and later reporting by BleepingComputer, Tom's Hardware, Crowdfund Insider and The Record from Recorded Future News put total losses at about $40 million across all affected assets, suggesting that assets beyond SOL, including tokens held in fee wallets and affiliated protocol wallets, were also drained but received less on-chain coverage. The discrepancy likely reflects the difference between SOL alone and the full basket of assets across treasury and fee wallets. Step Finance disclosed that approximately $4.7 million was recovered, reducing net losses but leaving the platform non-viable (see Recovery and Holder Compensation).","heading":"Financial Losses and Discrepancies in Reported Figures","sources":[{"url":"https://www.coindesk.com/business/2026/01/31/solana-based-defi-platform-step-finance-hit-by-usd30-million-treasury-hack-as-token-price-craters","name":"CoinDesk: Step Finance Hit by $30 Million Treasury Hack","type":"news_article","credibility":1},{"url":"https://www.tradingview.com/news/cointelegraph:f91785969094b:0-step-finance-treasury-wallets-breached-27m-in-sol-drained-as-step-crashes-90/","name":"Step Finance treasury wallets breached, $27M in SOL drained as STEP crashes 90% — CoinTelegraph via TradingView","type":"news_article","credibility":2},{"url":"https://www.coindesk.com/business/2026/02/24/step-finance-shuts-operations-after-usd27-million-january-hack","name":"CoinDesk: Step Finance Shuts Operations After $27 Million January Hack","type":"news_article","credibility":1},{"url":"https://www.crowdfundinsider.com/2026/02/263817-step-finance-ceases-operations-following-40-million-security-incident/","name":"Crowdfund Insider: Step Finance Ceases Operations Following $40 Million Security Incident","type":"news_article","credibility":2},{"url":"https://therecord.media/step-finance-cryptocurrency-theft-shutdown","name":"The Record from Recorded Future News: Step Finance Shutting Down After $40 Million Theft","type":"news_article","credibility":1},{"url":"https://www.theblock.co/post/390964/step-finance-shuts-down","name":"The Block: Step Finance Shuts Down","type":"news_article","credibility":1},{"url":"https://www.bleepingcomputer.com/news/security/step-finance-says-compromised-execs-devices-led-to-40m-crypto-theft/","name":"Step Finance says compromised execs' devices led to $40M crypto theft — BleepingComputer","type":"news_article","credibility":2},{"url":"https://www.tomshardware.com/tech-industry/cyber-security/usd40-million-worth-of-crypto-stolen-from-step-finance-hackers-compromise-executives-devices-to-gain-illicit-access","name":"Tom's Hardware: $40 Million Stolen From Step Finance After Executive Device Compromise","type":"news_article","credibility":2}],"severity":"critical"},{"content":"The STEP governance token, already in a prolonged decline from its 2021 peak near $10.20, collapsed after the January 31 breach. Within about a day of the disclosure STEP fell roughly 80–93%, from about $0.023 to as low as $0.001578. After the February 24, 2026 shutdown announcement the token fell further; reports differ on the size of that drop and the resulting price: about 36–37% to approximately $0.00057 according to one account citing CoinDesk, and 34–36% within 24 hours to approximately $0.0006013 according to another citing CoinTelegraph via TradingView, CoinDesk and CoinAlertNews. Cumulative losses from pre-hack levels are reported at approximately 96–97%. Kraken subsequently announced a three-phase delisting of STEP: trading and deposits disabled March 20, 2026; withdrawal support disabled June 19, 2026 (non-EEA); and remaining balances liquidated and converted to ETH at weighted market pricing on June 29, 2026. Kraken warned users that the STEP network could shut down at any time before those dates, potentially preventing recovery of remaining balances.","heading":"STEP Token Collapse and Kraken Delisting","sources":[{"url":"https://www.tradingview.com/news/cointelegraph:f91785969094b:0-step-finance-treasury-wallets-breached-27m-in-sol-drained-as-step-crashes-90/","name":"Step Finance treasury wallets breached, $27M in SOL drained as STEP crashes 90% — CoinTelegraph via TradingView","type":"news_article","credibility":2},{"url":"https://www.coindesk.com/business/2026/02/24/step-finance-shuts-operations-after-usd27-million-january-hack","name":"CoinDesk: Step Finance Shuts Operations After $27 Million January Hack","type":"news_article","credibility":1},{"url":"https://support.kraken.com/articles/step-delisting","name":"Kraken Support: Step Finance (STEP) Delisting","type":"official","credibility":1},{"url":"https://www.bitdegree.org/crypto/news/step-finance-breach-drains-27-million-in-sol-step-token-tanks-90","name":"BitDegree: Step Finance Breach Drains $27 Million in SOL, STEP Token Tanks 90%","type":"news_article","credibility":2},{"url":"https://rekt.news/step-finance-rekt","name":"Rekt News: Step Finance Rekt","type":"research","credibility":2},{"url":"https://coinalertnews.com/news/2026/02/24/step-finance-shutdown-solana-hack","name":"Step Finance Shuts Down After $27M Hack, Dealing Blow to Solana DeFi — CoinAlertNews","type":"news_article","credibility":3}],"severity":"high"},{"content":"On February 24, 2026, Step Finance announced the immediate and permanent cessation of all operations. The official statement read: \"Following the hack at the end of January we explored every possible path forward, including financing and acquisition opportunities. Unfortunately, we were unable to secure a viable outcome and have made the difficult decision to end all operations effective immediately.\" Co-founder George Harrap described it as \"a difficult day\" and said his immediate priority was \"finding good roles for our excellent team,\" while acknowledging that some parties had expressed interest in acquiring parts of the business but that the company was operating under significant time pressure. The closure covered three platforms: Step Finance (the core DeFi dashboard and portfolio tracker), SolanaFloor (an NFT analytics and Solana ecosystem media outlet), and Remora Markets (a tokenization and lending protocol). At the time of the shutdown, Step Finance had served an estimated 300,000–350,000 monthly active users and aggregated data from approximately 95% of Solana protocols.","heading":"Shutdown of Step Finance, SolanaFloor, and Remora Markets","sources":[{"url":"https://cointelegraph.com/news/step-finance-solanafloor-remora-markets-wind-down-operations","name":"CoinTelegraph: Step Finance, SolanaFloor, Remora Markets Wind Down","type":"news_article","credibility":1},{"url":"https://www.coindesk.com/business/2026/02/24/step-finance-shuts-operations-after-usd27-million-january-hack","name":"CoinDesk: Step Finance Shuts Operations After $27 Million January Hack","type":"news_article","credibility":1},{"url":"https://therecord.media/step-finance-cryptocurrency-theft-shutdown","name":"The Record from Recorded Future News: Step Finance Shutting Down After $40 Million Theft","type":"news_article","credibility":1},{"url":"https://finance.yahoo.com/news/solana-defi-project-step-finance-140151238.html","name":"Yahoo Finance: Solana DeFi Project Step Finance to Wind Down","type":"news_article","credibility":1},{"url":"https://invezz.com/news/2026/02/24/solana-defi-platform-step-finance-shuts-down-after-hack/","name":"Invezz: Solana DeFi Platform Step Finance Shuts Down After Hack","type":"news_article","credibility":2},{"url":"https://www.techloy.com/step-finance-shuts-down-after-40m-january-hack/","name":"Step Finance Shuts Down After $40M January Hack — Techloy","type":"news_article","credibility":3}],"severity":"critical"},{"content":"Step Finance reported recovering approximately $4.7 million in assets through Token22 protections and Remora-related holdings; The Record from Recorded Future News reported this as approximately $3.7 million in Remora assets and $1 million in other coins. The team announced a buyback program for STEP token holders based on a pre-hack snapshot of holdings and valuations. Remora rToken holders were offered a separate redemption process to reclaim USDC, with rTokens represented as remaining fully backed on a one-to-one basis. The buyback covers only a fraction of the total loss and was not expected to make holders whole, as the primary treasury loss of 261,854 SOL remained unrecovered. No public timeline for completing these compensation mechanisms was confirmed in available sources.","heading":"Recovery and Holder Compensation","sources":[{"url":"https://therecord.media/step-finance-cryptocurrency-theft-shutdown","name":"The Record from Recorded Future News: Step Finance Shutting Down After $40 Million Theft","type":"news_article","credibility":1},{"url":"https://www.coindesk.com/business/2026/02/24/step-finance-shuts-operations-after-usd27-million-january-hack","name":"CoinDesk: Step Finance Shuts Operations After $27 Million January Hack","type":"news_article","credibility":1},{"url":"https://cointelegraph.com/news/step-finance-solanafloor-remora-markets-wind-down-operations","name":"CoinTelegraph: Step Finance, SolanaFloor, Remora Markets Wind Down","type":"news_article","credibility":1},{"url":"https://coinfomania.com/step-holders-get-buyback-as-solana-projects-shut-down/","name":"STEP Holders Get Buyback as Solana Projects Shut Down — CoinFomania","type":"news_article","credibility":3},{"url":"https://www.ainvest.com/news/step-finance-hack-27m-liquidity-drain-token-collapse-2602/","name":"Step Finance Hack: A $27M Liquidity Drain and Token Collapse — Ainvest","type":"news_article","credibility":3}],"severity":"medium"},{"content":"Security analysts and post-mortems consistently identify the Step Finance breach as an operational security (OpSec) failure rather than a smart contract vulnerability. The primary attack surface was the human layer: private keys or signing credentials stored on or accessible via executive devices were exposed, allowing the attacker to authorize legitimate-looking transactions without any on-chain protocol violation. Halborn and other researchers noted weak key management and insufficient access controls, an absence of monitoring during off-hours operations, and single points of failure in treasury authorization. Compromising executive devices to extract private keys has historically been linked to phishing, spear-phishing, or targeted malware campaigns. Step Finance's contracts had previously been audited, but audits provide no protection against credential compromise at the infrastructure layer.","heading":"Operational Security Failure: Root Cause Analysis","sources":[{"url":"https://www.halborn.com/blog/post/explained-the-step-finance-hack-january-2026","name":"Halborn: Explained — The Step Finance Hack (January 2026)","type":"research","credibility":2},{"url":"https://www.assuredefi.com/blog/step-finance-hack-explained-40m-executive-device-breach","name":"Assure DeFi: Step Finance Hack Explained — $40M Executive Device Breach","type":"research","credibility":2},{"url":"https://www.ccn.com/education/crypto/defi-hacks-2026-137m-lost-step-finance-truebit-resolv-exploits/","name":"CCN: 400M+ Lost to DeFi Exploits in 2026","type":"news_article","credibility":2}],"severity":"high"},{"content":"Step Finance was one of Solana's earliest and most widely used infrastructure projects, and its shutdown removed a major portfolio aggregation layer from the ecosystem; SolanaFloor's closure simultaneously eliminated a significant Solana-native media and NFT analytics outlet. The incident occurred during a broader wave of security incidents: total crypto theft in January 2026 was reported at nearly $400 million across multiple platforms, and Step Finance was cited alongside Drift Protocol and Rhea Finance among the largest hacks in the 2026 DeFi exploit landscape, as part of a pattern in which private key compromises accounted for the majority of DeFi losses in early 2026. Tom's Hardware described it as \"the biggest crypto hack of the year, so far\" at the time of its reporting. The incident contributed to negative sentiment around Solana DeFi security and illustrated that private key and endpoint security remain a significant attack surface even for established protocols.","heading":"Broader Ecosystem Impact and the Early-2026 Hack Wave","sources":[{"url":"https://finance.yahoo.com/news/step-finance-solanafloor-shut-down-021611434.html","name":"Yahoo Finance: Step Finance and SolanaFloor Shut Down After Devastating Hack","type":"news_article","credibility":1},{"url":"https://crypto.news/step-finance-shutdown-solana-january-hack-2026/","name":"Crypto.news: Solana-Based Step Finance Shuts Down After $40M January Hack","type":"news_article","credibility":2},{"url":"https://www.tomshardware.com/tech-industry/cyber-security/usd40-million-worth-of-crypto-stolen-from-step-finance-hackers-compromise-executives-devices-to-gain-illicit-access","name":"Tom's Hardware: $40 Million Stolen From Step Finance After Executive Device Compromise","type":"news_article","credibility":2},{"url":"https://finance.yahoo.com/news/crypto-theft-hit-nearly-400-180626234.html","name":"Crypto Theft Hit Nearly $400 Million in January 2026 — Yahoo Finance","type":"news_article","credibility":2},{"url":"https://www.ccn.com/education/crypto/defi-hacks-2026-137m-lost-step-finance-truebit-resolv-exploits/","name":"CCN: 400M+ Lost to DeFi Exploits in 2026","type":"news_article","credibility":2}],"severity":"medium"}],"timeline":[{"date":"2021-02","event":"Step Finance originates from a Solana hackathon, founded by George Harrap; it begins as a DCA contract before pivoting to a portfolio tracker.","source":"The Defiant","source_url":"https://thedefiant.io/news/defi/step-finance-raises-2m-in-round-led-by-alameda-research"},{"date":"2021-04","event":"Step Finance raises a $2 million seed round led by Alameda Research, with participation from 3 Commas Capital, Raydium, One Block, and Solidity Ventures.","source":"CoinDesk","source_url":"https://www.coindesk.com/business/2021/04/13/solana-dashboard-step-finance-raises-2m-from-alameda-research-3-commas"},{"date":"2021-08","event":"STEP token reaches an all-time high of approximately $10.20.","source":"CoinTelegraph","source_url":"https://cointelegraph.com/news/step-finance-solanafloor-remora-markets-wind-down-operations"},{"date":"2026-01","event":"January 31: attackers compromise executive team devices during APAC hours, seize staker and withdrawer authority over Step Finance staked SOL, and unstake and withdraw approximately 261,854–261,932 SOL (about $27.3 million at the time). Total losses including non-SOL assets later reported as approximately $40 million.","source":"CoinDesk / Rekt News","source_url":"https://www.coindesk.com/business/2026/01/31/solana-based-defi-platform-step-finance-hit-by-usd30-million-treasury-hack-as-token-price-craters"},{"date":"2026-01","event":"January 31: Step Finance discloses the breach on X as a compromise of \"several treasury wallets\" by \"a sophisticated actor.\" STEP token crashes roughly 80–93% within 24 hours.","source":"CoinTelegraph via TradingView","source_url":"https://www.tradingview.com/news/cointelegraph:f91785969094b:0-step-finance-treasury-wallets-breached-27m-in-sol-drained-as-step-crashes-90/"},{"date":"2026-01","event":"January 31: CertiK flags and confirms on-chain that 261,854 SOL was unstaked and transferred from Step Finance-controlled wallets to attacker-controlled addresses.","source":"Rekt News","source_url":"https://rekt.news/step-finance-rekt"},{"date":"2026-02","event":"February 2: Step Finance confirms the root cause was the compromise of executive team members' devices, exposing private keys, and advises against STEP token engagement pending investigation.","source":"Rekt News","source_url":"https://rekt.news/step-finance-rekt"},{"date":"2026-02","event":"February 24: Step Finance announces immediate closure of all operations, including SolanaFloor and Remora Markets, after failing to secure financing or an acquisition. Co-founder George Harrap calls it \"a difficult day.\"","source":"CoinTelegraph","source_url":"https://cointelegraph.com/news/step-finance-solanafloor-remora-markets-wind-down-operations"},{"date":"2026-02","event":"February 24: STEP token falls a further 34–36% on the shutdown announcement (reported prices of approximately $0.00057 and $0.0006013); cumulative losses from pre-hack levels reach roughly 96–97%.","source":"CoinDesk","source_url":"https://www.coindesk.com/business/2026/02/24/step-finance-shuts-operations-after-usd27-million-january-hack"},{"date":"2026-02","event":"February 24: Step Finance announces a STEP buyback based on a pre-hack snapshot and a separate Remora token redemption process; approximately $4.7 million in assets recovered through Token22 and Remora holdings.","source":"The Record (Recorded Future News)","source_url":"https://therecord.media/step-finance-cryptocurrency-theft-shutdown"},{"date":"2026-03","event":"March 20: Kraken disables STEP deposits and trading as the first phase of a three-phase delisting.","source":"Kraken Support","source_url":"https://support.kraken.com/articles/step-delisting"},{"date":"2026-06","event":"June 29: Kraken schedules final liquidation of remaining STEP balances, converting them to ETH at weighted market pricing.","source":"Kraken Support","source_url":"https://support.kraken.com/articles/step-delisting"}],"sources_used":[{"url":"https://www.coindesk.com/business/2026/01/31/solana-based-defi-platform-step-finance-hit-by-usd30-million-treasury-hack-as-token-price-craters","name":"CoinDesk: Step Finance Hit by $30 Million Treasury Hack","type":"news_article","archive_url":"http://web.archive.org/web/20260712175323/https://www.coindesk.com/business/2026/01/31/solana-based-defi-platform-step-finance-hit-by-usd30-million-treasury-hack-as-token-price-craters","credibility":1,"archive_timestamp":"2026-07-12T17:53:23+00:00"},{"url":"https://www.coindesk.com/business/2026/02/24/step-finance-shuts-operations-after-usd27-million-january-hack","name":"CoinDesk: Step Finance Shuts Operations After $27 Million January Hack","type":"news_article","archive_url":"http://web.archive.org/web/20260527132550/https://www.coindesk.com/business/2026/02/24/step-finance-shuts-operations-after-usd27-million-january-hack","credibility":1,"archive_timestamp":"2026-05-27T13:25:50+00:00"},{"url":"https://cointelegraph.com/news/step-finance-solanafloor-remora-markets-wind-down-operations","name":"CoinTelegraph: Step Finance, SolanaFloor, Remora Markets Wind Down","type":"news_article","archive_url":"http://web.archive.org/web/20260629045109/https://cointelegraph.com/news/step-finance-solanafloor-remora-markets-wind-down-operations","credibility":1,"archive_timestamp":"2026-06-29T04:51:09+00:00"},{"url":"https://www.theblock.co/post/390964/step-finance-shuts-down","name":"The Block: Step Finance Shuts Down","type":"news_article","archive_url":"http://web.archive.org/web/20260224093629/https://www.theblock.co/post/390964/step-finance-shuts-down","credibility":1,"archive_timestamp":"2026-02-24T09:36:29+00:00"},{"url":"https://therecord.media/step-finance-cryptocurrency-theft-shutdown","name":"The Record from Recorded Future News: Step Finance Shutting Down After $40 Million Theft","type":"news_article","archive_url":"http://web.archive.org/web/20260516001108/https://therecord.media/step-finance-cryptocurrency-theft-shutdown","credibility":1,"archive_timestamp":"2026-05-16T00:11:08+00:00"},{"url":"https://finance.yahoo.com/news/step-finance-solanafloor-shut-down-021611434.html","name":"Yahoo Finance: Step Finance and SolanaFloor Shut Down After Devastating Hack","type":"news_article","archive_url":"https://web.archive.org/web/20260727000607/https://finance.yahoo.com/news/step-finance-solanafloor-shut-down-021611434.html","credibility":1,"archive_timestamp":"2026-07-27T00:06:07+00:00"},{"url":"https://finance.yahoo.com/news/solana-defi-project-step-finance-140151238.html","name":"Yahoo Finance: Solana DeFi Project Step Finance to Wind Down","type":"news_article","archive_url":"http://web.archive.org/web/20260225131553/https://finance.yahoo.com/news/solana-defi-project-step-finance-140151238.html","credibility":1,"archive_timestamp":"2026-02-25T13:15:53+00:00"},{"url":"https://rekt.news/step-finance-rekt","name":"Rekt News: Step Finance Rekt","type":"research","archive_url":"http://web.archive.org/web/20260313101830/https://rekt.news/step-finance-rekt","credibility":2,"archive_timestamp":"2026-03-13T10:18:30+00:00"},{"url":"https://www.halborn.com/blog/post/explained-the-step-finance-hack-january-2026","name":"Halborn: Explained — The Step Finance Hack (January 2026)","type":"research","archive_url":"http://web.archive.org/web/20260517000124/https://www.halborn.com/blog/post/explained-the-step-finance-hack-january-2026","credibility":2,"archive_timestamp":"2026-05-17T00:01:24+00:00"},{"url":"https://www.crowdfundinsider.com/2026/02/263817-step-finance-ceases-operations-following-40-million-security-incident/","name":"Crowdfund Insider: Step Finance Ceases Operations Following $40 Million Security Incident","type":"news_article","archive_url":"http://web.archive.org/web/20261004211206/https://www.crowdfundinsider.com/2026/02/263817-step-finance-ceases-operations-following-40-million-security-incident/","credibility":2,"archive_timestamp":"2026-10-04T21:12:06+00:00"},{"url":"https://invezz.com/news/2026/02/24/solana-defi-platform-step-finance-shuts-down-after-hack/","name":"Invezz: Solana DeFi Platform Step Finance Shuts Down After Hack","type":"news_article","archive_url":"http://web.archive.org/web/20260327033538/https://invezz.com/news/2026/02/24/solana-defi-platform-step-finance-shuts-down-after-hack/","credibility":2,"archive_timestamp":"2026-03-27T03:35:38+00:00"},{"url":"https://support.kraken.com/articles/step-delisting","name":"Kraken Support: Step Finance (STEP) Delisting","type":"official","archive_url":"http://web.archive.org/web/20260718111602/https://support.kraken.com/articles/step-delisting","credibility":1,"archive_timestamp":"2026-07-18T11:16:02+00:00"},{"url":"https://www.coindesk.com/business/2021/04/13/solana-dashboard-step-finance-raises-2m-from-alameda-research-3-commas","name":"CoinDesk: Step Finance Raises $2M From Alameda Research, 3 Commas","type":"news_article","archive_url":"https://web.archive.org/web/20260727010043/https://www.coindesk.com/business/2021/04/13/solana-dashboard-step-finance-raises-2m-from-alameda-research-3-commas","credibility":1,"archive_timestamp":"2026-07-27T01:00:43+00:00"},{"url":"https://www.assuredefi.com/blog/step-finance-hack-explained-40m-executive-device-breach","name":"Assure DeFi: Step Finance Hack Explained — $40M Executive Device Breach","type":"research","archive_url":"http://web.archive.org/web/20260309022844/https://www.assuredefi.com/blog/step-finance-hack-explained-40m-executive-device-breach","credibility":2,"archive_timestamp":"2026-03-09T02:28:44+00:00"},{"url":"https://www.halborn.com/blog/post/month-in-review-top-defi-hacks-of-january-2026","name":"Halborn: Month in Review — Top DeFi Hacks of January 2026","type":"research","archive_url":"http://web.archive.org/web/20260215113335/https://www.halborn.com/blog/post/month-in-review-top-defi-hacks-of-january-2026","credibility":2,"archive_timestamp":"2026-02-15T11:33:35+00:00"},{"url":"https://www.ccn.com/education/crypto/defi-hacks-2026-137m-lost-step-finance-truebit-resolv-exploits/","name":"CCN: 400M+ Lost to DeFi Exploits in 2026","type":"news_article","archive_url":"http://web.archive.org/web/20260327052525/https://www.ccn.com/education/crypto/defi-hacks-2026-137m-lost-step-finance-truebit-resolv-exploits/","credibility":2,"archive_timestamp":"2026-03-27T05:25:25+00:00"},{"url":"https://www.govinfosecurity.com/cryptohack-roundup-step-finance-shuts-down-after-exploit-a-30855","name":"GovInfoSecurity: Cryptohack Roundup — Step Finance Shuts Down After Exploit","type":"news_article","archive_url":"http://web.archive.org/web/20260508132301/https://www.govinfosecurity.com/cryptohack-roundup-step-finance-shuts-down-after-exploit-a-30855","credibility":2,"archive_timestamp":"2026-05-08T13:23:01+00:00"},{"url":"https://coinpedia.org/news/solana-ecosystem-step-finance-shuts-down-after-29m-hack/","name":"Coinpedia: Solana Ecosystem Step Finance Shuts Down After $29M Hack","type":"news_article","archive_url":"http://web.archive.org/web/20260521110153/https://coinpedia.org/news/solana-ecosystem-step-finance-shuts-down-after-29m-hack/","credibility":2,"archive_timestamp":"2026-05-21T11:01:53+00:00"},{"url":"https://thedefiant.io/news/defi/step-finance-raises-2m-in-round-led-by-alameda-research","name":"The Defiant: Step Finance Raises $2M in Round Led by Alameda Research","type":"news_article","archive_url":"http://web.archive.org/web/20261023174743/https://thedefiant.io/news/defi/step-finance-raises-2m-in-round-led-by-alameda-research","credibility":2,"archive_timestamp":"2026-10-23T17:47:43+00:00"},{"url":"https://www.tomshardware.com/tech-industry/cyber-security/usd40-million-worth-of-crypto-stolen-from-step-finance-hackers-compromise-executives-devices-to-gain-illicit-access","name":"Tom's Hardware: $40 Million Stolen From Step Finance After Executive Device Compromise","type":"news_article","archive_url":"http://web.archive.org/web/20260403115123/https://www.tomshardware.com/tech-industry/cyber-security/usd40-million-worth-of-crypto-stolen-from-step-finance-hackers-compromise-executives-devices-to-gain-illicit-access","credibility":2,"archive_timestamp":"2026-04-03T11:51:23+00:00"},{"url":"https://www.bitdegree.org/crypto/news/step-finance-breach-drains-27-million-in-sol-step-token-tanks-90","name":"BitDegree: Step Finance Breach Drains $27 Million in SOL, STEP Token Tanks 90%","type":"news_article","archive_url":null,"credibility":2,"archive_timestamp":null},{"url":"https://crypto.news/step-finance-shutdown-solana-january-hack-2026/","name":"Crypto.news: Solana-Based Step Finance Shuts Down After $40M January Hack","type":"news_article","archive_url":"http://web.archive.org/web/20261023174632/https://crypto.news/step-finance-shutdown-solana-january-hack-2026/","credibility":2,"archive_timestamp":"2026-10-23T17:46:32+00:00"},{"url":"https://www.bleepingcomputer.com/news/security/step-finance-says-compromised-execs-devices-led-to-40m-crypto-theft/","name":"Step Finance says compromised execs' devices led to $40M crypto theft — BleepingComputer","type":"news_article","archive_url":"http://web.archive.org/web/20260720142523/https://www.bleepingcomputer.com/news/security/step-finance-says-compromised-execs-devices-led-to-40m-crypto-theft/","credibility":2,"archive_timestamp":"2026-07-20T14:25:23+00:00"},{"url":"https://www.tradingview.com/news/cointelegraph:f91785969094b:0-step-finance-treasury-wallets-breached-27m-in-sol-drained-as-step-crashes-90/","name":"Step Finance treasury wallets breached, $27M in SOL drained as STEP crashes 90% — CoinTelegraph via TradingView","type":"news_article","archive_url":"http://web.archive.org/web/20260202061805/https://www.tradingview.com/news/cointelegraph:f91785969094b:0-step-finance-treasury-wallets-breached-27m-in-sol-drained-as-step-crashes-90/","credibility":2,"archive_timestamp":"2026-02-02T06:18:05+00:00"},{"url":"https://finance.yahoo.com/news/30m-stolen-step-finance-treasury-082939652.html","name":"$30M Stolen as Step Finance Treasury Wallets Compromised — CryptoNews via Yahoo Finance","type":"news_article","archive_url":"http://web.archive.org/web/20260201124202/https://finance.yahoo.com/news/30m-stolen-step-finance-treasury-082939652.html","credibility":2,"archive_timestamp":"2026-02-01T12:42:02+00:00"},{"url":"https://finance.yahoo.com/news/crypto-theft-hit-nearly-400-180626234.html","name":"Crypto Theft Hit Nearly $400 Million in January 2026 — Yahoo Finance","type":"news_article","archive_url":"http://web.archive.org/web/20260311212507/https://finance.yahoo.com/news/crypto-theft-hit-nearly-400-180626234.html","credibility":2,"archive_timestamp":"2026-03-11T21:25:07+00:00"},{"url":"https://solanacompass.com/projects/step-finance","name":"Step Finance on Solana: Project Review — Solana Compass","type":"other","archive_url":"http://web.archive.org/web/20251208002233/https://solanacompass.com/projects/step-finance","credibility":2,"archive_timestamp":"2025-12-08T00:22:33+00:00"},{"url":"https://www.crunchbase.com/person/george-harrap-e876","name":"George Harrap — Co-Founder of Step Finance — Crunchbase","type":"other","archive_url":null,"credibility":2,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://coinfomania.com/step-holders-get-buyback-as-solana-projects-shut-down/","name":"STEP Holders Get Buyback as Solana Projects Shut Down — CoinFomania","type":"news_article","archive_url":"https://web.archive.org/web/20260726190425/https://coinfomania.com/step-holders-get-buyback-as-solana-projects-shut-down/","credibility":3,"archive_timestamp":"2026-07-26T19:04:25+00:00"},{"url":"https://cryip.co/step-finance-treasury-breach/","name":"Step Finance Treasury Breach: A Case Study in Operational Security Failure — Cryip","type":"other","archive_url":"http://web.archive.org/web/20260414175508/https://cryip.co/step-finance-treasury-breach/","credibility":3,"archive_timestamp":"2026-04-14T17:55:08+00:00"},{"url":"https://www.technewshub.co.uk/post/step-finance-drained-40-million-worth-of-crypto-stolen-in-executive-device-heist","name":"Step Finance drained: $40 million worth of crypto stolen in executive device heist — TechNewsHub","type":"news_article","archive_url":"http://web.archive.org/web/20261023111621/https://www.technewshub.co.uk/post/step-finance-drained-40-million-worth-of-crypto-stolen-in-executive-device-heist","credibility":3,"archive_timestamp":"2026-10-23T11:16:21+00:00"},{"url":"https://bitcoinethereumnews.com/tech/step-finance-hack-27m-sol-stolen-step-crashes-93/","name":"Step Finance Hack: $27M SOL Stolen, STEP Crashes 93% — Bitcoin Ethereum News","type":"news_article","archive_url":null,"credibility":3,"archive_error":"error:no-job","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://coinalertnews.com/news/2026/02/24/step-finance-shutdown-solana-hack","name":"Step Finance Shuts Down After $27M Hack, Dealing Blow to Solana DeFi — CoinAlertNews","type":"news_article","archive_url":"http://web.archive.org/web/20261012004918/https://coinalertnews.com/news/2026/02/24/step-finance-shutdown-solana-hack","credibility":3,"archive_timestamp":"2026-10-12T00:49:18+00:00"},{"url":"https://www.techloy.com/step-finance-shuts-down-after-40m-january-hack/","name":"Step Finance Shuts Down After $40M January Hack — Techloy","type":"news_article","archive_url":"http://web.archive.org/web/20261012005036/https://www.techloy.com/step-finance-shuts-down-after-40m-january-hack/","credibility":3,"archive_timestamp":"2026-10-12T00:50:36+00:00"},{"url":"https://www.ainvest.com/news/step-finance-hack-27m-liquidity-drain-token-collapse-2602/","name":"Step Finance Hack: A $27M Liquidity Drain and Token Collapse — Ainvest","type":"news_article","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null}],"source_tags":[],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-code-merge-writer","created_at":"2026-06-23T23:30:06.249237+00:00","updated_at":"2026-11-06T09:46:49.507253+00:00"},"source_quality":{"total":35,"tier1":0,"tier2":6,"tier3":0,"unrated":29},"follower_count":null,"content_updated_at":"2026-10-27T19:27:12.527Z","last_fact_checked_at":"2026-10-27T19:27:12.149Z","fact_check_next_allowed_at":null,"update_next_allowed_at":null}