Step Finance, a decentralized finance (DeFi) portfolio tracker built on Solana, said some of its treasury portfolios were compromised in a security breach under active investigation.
On-chain data shared by blockchain security firm CertiK shows that 261,854 SOL, worth approximately $27 million at current prices, were withdrawn and transferred during the incident.
The platform revealed the breach in a post on X and asked cybersecurity companies to help with the investigation. It did not specify how the attacker gained access or whether user funds were affected.
The platform’s governance token, STEP, fell more than 80% in the last 24 hours, according to data from SoSoValue. Step also operates a validator node on Solana and uses validator earnings to fund STEP token buybacks.
Founded in 2021, Step Finance aggregates yield farms, LP tokens, and DeFi positions on almost all Solana protocols in a single dashboard.
He also runs SolanaFloor, a Solana-focused media outlet, and organizes the Solana Crossroads conference. In late 2024, it acquired Moose Capital (now Remora Markets) and plans to offer tokenized stock trading on Solana.
