Solana Hit Hard: $27 Million Exploit Triggers Wave Of Shutdowns

bitcoinistPublished on 2026-02-25Last updated on 2026-02-25

Abstract

Step Finance, a DeFi analytics platform on Solana, has announced a complete shutdown of all services following a major security breach. The incident resulted in an unrecoverable loss of approximately 261,854 SOL (worth around $27 million) from the project's treasury. This direct attack on its reserves forced the team to wind down operations, including its main dashboard and linked businesses like SolanaFloor and Remora Markets. A token buyback based on a pre-hack snapshot is planned for STEP holders, while Remora rToken owners will have a separate redemption process. The news caused STEP's price and liquidity to collapse. This event highlights the severe impact of security failures and contributes to a broader decline in activity and value within the Solana DeFi ecosystem.

Operating within the Solana ecosystem, the platform had become a familiar tool for tracking DeFi activity before events took a sudden turn.

Step Finance’s sudden shutdown is a sharp example of how a single security failure can end a project’s life faster than many thought possible.

Reports say the team decided to stop all work after what it called an unrecoverable breach of treasury accounts. The move covers the main dashboard and several linked businesses, and token holders are left sorting out the fallout.

Security Breach Shuts Down Services

Based on reports, the treasury loss involved coins that had been unstaked and then moved off-platform. CertiK flagged that 261,854 SOL was taken during the incident, a sum worth roughly $27 million at the time.

That kind of hit is not the same as a user-level contract exploit; this was a direct blow to the group’s cash and reserves. The team explored options, including outside funding and potential sales, but did not find a deal that would keep operations running.

Tokens And Teams Face Immediate Pain

The shutdown covers more than one product. Reports note that the closure extends to the analytics outlet and a lending arm that had been tied into the same corporate structure.

SolanaFloor and Remora Markets are among the units now listed as winding down. People who relied on those tools will need alternatives, and some work that tied into Solana dashboards will disappear overnight.

Buybacks, Snapshots, And Liquidity Problems

There will be a token buyback based on a snapshot taken before the incident, the team says. Reports say holders of the native STEP token can expect a redemption plan, while Remora rToken owners will have a separate process.

Market reaction was brutal. STEP’s price fell steeply in the days after the breach and slumped further on the shutdown announcement. Liquidity that once existed around STEP has largely evaporated, making any recovery a steep climb.

SOLUSD now trading at $76,73. Chart: TradingView

Solana’s Ecosystem Loses Momentum

Reports note that overall DeFi activity on the Solana network has been shrinking since its last peak. DeFiLlama lists Total Value Locked as far lower than it was months ago. SOL itself has been weaker, trading at much lower levels than during high-flying market stretches.

Featured image from Unsplash, chart from TradingView

Related Questions

QWhat was the total value of SOL stolen in the Step Finance security breach?

A261,854 SOL, worth approximately $27 million at the time.

QWhich specific projects and services are being shut down as a result of this incident?

AStep Finance, SolanaFloor, and Remora Markets are all winding down operations.

QWhat was the nature of the security breach that led to the treasury loss?

AThe breach was a direct attack on the project's treasury accounts, involving coins that had been unstaked and then moved off-platform, rather than a user-level contract exploit.

QWhat options did the Step Finance team explore before deciding to shut down?

AThe team explored external financing and potential acquisition opportunities but was unable to find a deal that would allow operations to continue.

QWhat is the plan for token holders following the shutdown announcement?

AThere will be a token buyback based on a snapshot taken before the incident. STEP token holders can expect a redemption plan, and Remora rToken owners will have a separate process to redeem their tokens for USDC.

Related Reads

An Open-Source AI Tool That No One Saw Predicted Kelp DAO's $292 Million Vulnerability 12 Days Ago

An open-source AI security tool flagged critical risks in Kelp DAO’s cross-chain architecture 12 days before a $292 million exploit on April 18, 2026—the largest DeFi incident of the year. The vulnerability was not in the smart contracts but in the configuration of LayerZero’s cross-chain bridge: a 1-of-1 Decentralized Verifier Network (DVN) setup allowed an attacker to forge cross-chain messages with a single compromised node. The tool, which performs AI-assisted architectural risk assessments using public data, identified several unremediated risks, including opaque DVN configuration, single-point-of-failure across 16 chains, unverified cross-chain governance controls, and similarities to historical bridge attacks like Ronin and Harmony. It also noted the absence of an insurance pool, which amplified losses as Aave and other protocols absorbed nearly $300M in bad debt. The attack unfolded over 46 minutes: the attacker minted 116,500 rsETH on Ethereum via a fraudulent message, used it as collateral to borrow WETH on lending platforms, and laundered funds through Tornado Cash. While an emergency pause prevented two subsequent attacks worth ~$200M, the damage was severe. The tool’s report, committed to GitHub on April 6, scored Kelp DAO a medium-risk 72/100—later acknowledged as too lenient. It failed to query on-chain DVN configurations or initiate private disclosure, highlighting gaps in current DeFi security approaches that focus on code audits but miss config-level and governance risks. The incident underscores the need for independent, AI-powered risk assessment tools that evaluate protocol architecture, not just code.

marsbit1h ago

An Open-Source AI Tool That No One Saw Predicted Kelp DAO's $292 Million Vulnerability 12 Days Ago

marsbit1h ago

Trading

Spot
Futures

Hot Articles

Discussions

Welcome to the HTX Community. Here, you can stay informed about the latest platform developments and gain access to professional market insights. Users' opinions on the price of SOL (SOL) are presented below.

活动图片