Solana Hit Hard: $27 Million Exploit Triggers Wave Of Shutdowns

bitcoinistPublished on 2026-02-25Last updated on 2026-02-25

Abstract

Step Finance, a DeFi analytics platform on Solana, has announced a complete shutdown of all services following a major security breach. The incident resulted in an unrecoverable loss of approximately 261,854 SOL (worth around $27 million) from the project's treasury. This direct attack on its reserves forced the team to wind down operations, including its main dashboard and linked businesses like SolanaFloor and Remora Markets. A token buyback based on a pre-hack snapshot is planned for STEP holders, while Remora rToken owners will have a separate redemption process. The news caused STEP's price and liquidity to collapse. This event highlights the severe impact of security failures and contributes to a broader decline in activity and value within the Solana DeFi ecosystem.

Operating within the Solana ecosystem, the platform had become a familiar tool for tracking DeFi activity before events took a sudden turn.

Step Finance’s sudden shutdown is a sharp example of how a single security failure can end a project’s life faster than many thought possible.

Reports say the team decided to stop all work after what it called an unrecoverable breach of treasury accounts. The move covers the main dashboard and several linked businesses, and token holders are left sorting out the fallout.

Security Breach Shuts Down Services

Based on reports, the treasury loss involved coins that had been unstaked and then moved off-platform. CertiK flagged that 261,854 SOL was taken during the incident, a sum worth roughly $27 million at the time.

That kind of hit is not the same as a user-level contract exploit; this was a direct blow to the group’s cash and reserves. The team explored options, including outside funding and potential sales, but did not find a deal that would keep operations running.

Tokens And Teams Face Immediate Pain

The shutdown covers more than one product. Reports note that the closure extends to the analytics outlet and a lending arm that had been tied into the same corporate structure.

SolanaFloor and Remora Markets are among the units now listed as winding down. People who relied on those tools will need alternatives, and some work that tied into Solana dashboards will disappear overnight.

Buybacks, Snapshots, And Liquidity Problems

There will be a token buyback based on a snapshot taken before the incident, the team says. Reports say holders of the native STEP token can expect a redemption plan, while Remora rToken owners will have a separate process.

Market reaction was brutal. STEP’s price fell steeply in the days after the breach and slumped further on the shutdown announcement. Liquidity that once existed around STEP has largely evaporated, making any recovery a steep climb.

SOLUSD now trading at $76,73. Chart: TradingView

Solana’s Ecosystem Loses Momentum

Reports note that overall DeFi activity on the Solana network has been shrinking since its last peak. DeFiLlama lists Total Value Locked as far lower than it was months ago. SOL itself has been weaker, trading at much lower levels than during high-flying market stretches.

Featured image from Unsplash, chart from TradingView

Trending Cryptos

Related Questions

QWhat was the total value of SOL stolen in the Step Finance security breach?

A261,854 SOL, worth approximately $27 million at the time.

QWhich specific projects and services are being shut down as a result of this incident?

AStep Finance, SolanaFloor, and Remora Markets are all winding down operations.

QWhat was the nature of the security breach that led to the treasury loss?

AThe breach was a direct attack on the project's treasury accounts, involving coins that had been unstaked and then moved off-platform, rather than a user-level contract exploit.

QWhat options did the Step Finance team explore before deciding to shut down?

AThe team explored external financing and potential acquisition opportunities but was unable to find a deal that would allow operations to continue.

QWhat is the plan for token holders following the shutdown announcement?

AThere will be a token buyback based on a snapshot taken before the incident. STEP token holders can expect a redemption plan, and Remora rToken owners will have a separate process to redeem their tokens for USDC.

Related Reads

Only 153 Venture Capital Firms Invested in July: Is the Crypto VC Industry Experiencing a 'Mass Extinction'?

In July 2026, only 153 unique venture capital firms participated in disclosed crypto funding rounds, marking the lowest monthly count since November 2020. This figure represents an 87% decline from the peak of 1,177 firms in 2022. Overall, the first seven months of 2026 saw crypto projects raise approximately $11.78 billion across 481 rounds. This crypto VC contraction contrasts sharply with the broader venture capital landscape, where global VC investment reached a record $560.4 billion in H1 2026, heavily fueled by major AI company financings. This shift in capital allocation has drawn funds away from the crypto sector. Within crypto, funding is highly concentrated. Trading platforms, prediction markets, and payment sectors absorbed 53% of the total capital. While early-stage deals remain frequent, the largest sums flow to a few late-stage rounds and mergers & acquisitions, which surged to $7.23 billion in Q2 2026. The market is consolidating around top funds like a16z crypto and Dragonfly, which successfully raised new multi-billion dollar funds, while many smaller firms have retreated. Analysts describe this as a "great extinction" for crypto VCs, where capital is becoming more selective, favoring proven business models and assets over early-stage speculation. This raises the bar for project quality, funding efficiency, and viable exit paths.

marsbit16m ago

Only 153 Venture Capital Firms Invested in July: Is the Crypto VC Industry Experiencing a 'Mass Extinction'?

marsbit16m ago

Strategy's Loss in the Second Quarter Reaches $8.22 Billion Amid Bitcoin Decline

Strategy, the largest corporate holder of Bitcoin, reported a net loss of $8.22 billion for the second quarter. This loss was primarily driven by an $8.32 billion unrealized loss on its Bitcoin holdings due to a decline in the asset's price during the period. Despite these paper losses, the company increased its Bitcoin holdings to 843,775 BTC, a 25% growth since the start of the year. As part of a new monetization strategy, Strategy sold approximately $218.4 million worth of Bitcoin, mainly to fund dividends for preferred shareholders, with $216 million of that sold after Q2 ended. The company also built a $3.75 billion cash reserve, which it claims is sufficient to cover over two years of dividend and interest payments, aiming to insulate itself from Bitcoin's volatility while meeting obligations. Following the earnings release, Strategy's stock (MSTR) rose 4.7% in regular trading but corrected slightly after-hours. This pattern reflects how the company's accounting results are heavily tied to Bitcoin's price swings, even as its long-term strategy remains unchanged. The report indicates that Strategy is maintaining its core strategy of accumulating Bitcoin while building a financial buffer. This quarterly loss follows a recognizable pattern, with the company posting significant unrealized losses in previous quarters (e.g., $12.4 billion in Q4 2025 and ~$12.5 billion in Q1 2026) due to fair-value accounting. A key technical shift is its new monetization program, which introduces periodic selling pressure on the market, transitioning Strategy from a pure accumulator to a participant that occasionally adds supply. A critical question remains: how long can the cash reserve cover dividend obligations if a Bitcoin price downturn persists beyond two years?

cryptonews.ru36m ago

Strategy's Loss in the Second Quarter Reaches $8.22 Billion Amid Bitcoin Decline

cryptonews.ru36m ago

Will Terrorist Durov Ban Russian Officials?

Telegram founder Pavel Durov publicly reacted to being labeled a "terrorist" by Russian authorities, stating the designation came after he refused demands for mass surveillance and censorship on the platform. In a Telegram post, he highlighted that this status formally bans him from "publishing information online." Durov concluded with a statement widely circulated: Russian officials "clearly don't understand who can ban whom on the internet." This remark suggests Durov could potentially restrict official Russian government and officials' channels on Telegram, which continue to operate on the platform despite its formal blocking in Russia. The situation parallels previous, slow-moving state directives, like switching officials to domestic cars, contrasted with the current push to migrate all government communication to the Russian-made messenger MAX by 2030. However, reports indicate many officials still use Telegram via workarounds, fearing surveillance on MAX, while alternatives like BiP and KakaoTalk recently became inaccessible in Russia without a VPN. Durov has not specified any immediate actions against state channels. His statement is an initial response, with further developments depending on the authorities' reaction. The dynamic differs from 2020 when Russian regulators lifted a block on Telegram; now, Durov implies control from within the platform itself over the official accounts that persisted through that earlier blockade.

cryptonews.ru36m ago

Will Terrorist Durov Ban Russian Officials?

cryptonews.ru36m ago

DeepSeek V4 Official Version Arrives, New Capabilities Emerge, Value-for-Money King Enters the Fray

On July 31st, DeepSeek officially launched the public API beta for its DeepSeek-V4-Flash model. A key highlight is its performance on multiple Agent benchmark tests, reportedly nearing or even surpassing the level of the V4-Pro preview version from three months ago. Notably, the Flash model achieves this with significantly smaller scale (130B active parameters vs. Pro's 490B), suggesting that post-training optimization and data quality may be as crucial as raw model size. DeepSeek emphasized that the V4-Flash-0731 uses the same model architecture and size as its preview version, with improvements attributed solely to "re-trained post-training." The update also marks the official debut of DeepSeek's self-developed Agent framework, "Harness." The move signals DeepSeek's strategic push to position its cost-effective Flash model as a competitive base for Agent applications—scenarios requiring autonomous planning, tool usage, and complex task execution—where inference speed and cost are critical. By natively supporting OpenAI's Responses API format and adapting for code-generation scenarios, DeepSeek aims not just to be a cheaper alternative but to establish its own ecosystem in the Agent era. This release follows DeepSeek's record-breaking ~$50 billion fundraising round roughly two months prior, underscoring market confidence in its technology and commercialization prospects. The company is reportedly preparing for another funding round at a valuation of approximately $71 billion. The Flash model's advancement represents a step in fulfilling the high expectations that come with this valuation, setting the stage for the impending release of the V4-Pro official version and intensifying competition in the global Agent landscape.

marsbit41m ago

DeepSeek V4 Official Version Arrives, New Capabilities Emerge, Value-for-Money King Enters the Fray

marsbit41m ago

Trading

Spot

Hot Articles

Discussions

Welcome to the HTX Community. Here, you can stay informed about the latest platform developments and gain access to professional market insights. Users' opinions on the price of SOL (SOL) are presented below.

活动图片