Skip to main content
AVOID.NET

Step Finance Hack and Shutdown

avoid.net/step-finance-hack-shutdown-202612/100·88% conf.
[AI-DRAFTED · AWAITING VERIFICATION]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·54AWsN…kX9N

Summary

Step Finance, a Solana-based DeFi portfolio tracking dashboard founded in 2021, suffered a treasury breach on January 31, 2026, when attackers compromised executive team devices and drained approximately 261,854 SOL (valued at $27–40 million depending on reporting method). Unable to secure financing or an acquisition, Step Finance and its affiliated platforms SolanaFloor and Remora Markets announced permanent closure on February 24, 2026, making this one of the most consequential operational security failures in the Solana ecosystem to date.

Connected Entities

10 entities · 60 linked investigations
Organizations
Protocols
Step Finance Hack and ShutdownDrift Protocol18
Tokens
Wallets
7raxie…udNhLEP1uH…SdNu
Relationships
  • LEP1uH…SdNumentioned withStep Finance Hack and Shutdown(50%)
  • 7raxie…udNhmentioned withStep Finance Hack and Shutdown(50%)
  • Step Finance Hack and Shutdownmentioned withKraken(70%)
  • Step Finance Hack and Shutdownmentioned withBitcoin(60%)
  • Step Finance Hack and Shutdownmentioned withDrift(80%)
  • Step Finance Hack and Shutdownmentioned withSolana(80%)
  • Remora Marketsmentioned withSolana(80%)
  • Step Finance Hack and Shutdownmentioned withAlameda Research(80%)
  • Step Finance Hack and Shutdownmentioned withDrift Protocol(80%)
  • Step Finance Hack and Shutdownmentioned withRemora Markets(80%)
  • + 5 more
Have evidence about Step Finance Hack and Shutdown?

Timeline(10 events)

February 2021

Step Finance originates from a Solana hackathon, founded by George Harrap.

The Defiant

13 April 2021

Step Finance raises $2 million seed round led by Alameda Research, with participation from 3 Commas Capital, Raydium, One Block, and Solidity Ventures.

CoinDesk

August 2021

STEP token reaches an all-time high of approximately $10.20.

CoinTelegraph

31 January 2026

Attackers compromise executive team devices during APAC hours, gaining access to Step Finance treasury and fee wallets. Approximately 261,854–261,932 SOL (worth $27–29 million) is unstaked and withdrawn. Total losses including non-SOL assets later reported as approximately $40 million.

CoinDesk / Rekt News

31 January 2026

STEP token crashes more than 80% following breach disclosure. CertiK flags on-chain withdrawals.

CoinDesk

2 February 2026

Step Finance confirms root cause: executive team devices were compromised, exposing private keys. Team advises against STEP token engagement pending investigation.

Rekt News

24 February 2026

Step Finance announces immediate closure of all operations, including SolanaFloor and Remora Markets, after failing to secure financing or an acquisition. Co-founder George Harrap cites time pressure and confirmed partial buyback plans for STEP holders.

CoinTelegraph

24 February 2026

STEP token declines a further 36% on the shutdown announcement, reaching approximately $0.00057. Cumulative losses from pre-hack levels reach roughly 97%.

CoinDesk

20 March 2026

Kraken disables STEP deposits and trading as part of a three-phase delisting process.

Kraken Support

29 June 2026

Kraken schedules final liquidation of remaining STEP balances, converting to ETH at weighted market pricing.

Kraken Support
Provenance & Audit Trail

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event). 17 of 18 cited source URLs have an Internet Archive snapshot.

model: claude-code-investigator

generated: 6/23/2026, 11:30:06 PM

last updated: 7/27/2026, 10:56:28 AM

3 views

avoid.net — verified advice for a post-truth world