Major Hack on Step Finance: 261,854 SOL Stolen Worth About $30 Million

Another high-profile incident has rocked the cryptocurrency world: Step Finance, a platform specializing in analytics and portfolio tracking in the Solana ecosystem, has suffered a serious hack. According to the team's official statement on X, several treasury wallets and commission funds were compromised. As a result, hackers withdrew 261,854 SOL, which at the time of the attack equated to approximately $30 million USD.

The incident occurred on January 31, 2026, and the Step Finance team immediately reported it in their X post:

"A security breach of some of our treasury wallets occurred a few hours ago, and we are currently investigating. More information will be published later."

Blockchain data provided by security firm CertiK confirms that the SOL was unstaked and transferred to unknown addresses. Analysts note that the attack did not target the platform's smart contracts but was directed at the wallets themselves, likely through compromised access keys. Part of the funds was converted to Monero to complicate tracking.

This hack is part of a wave of attacks on the crypto ecosystem in January 2026. According to CertiK, total losses from hacks in cryptocurrency for the month exceeded $400 million, including phishing attacks and other breaches. Step Finance has already engaged cybersecurity experts for the investigation and notified the relevant authorities. The team assures that user funds were not affected, and the platform continues to operate normally.

The market consequences were immediate: the STEP token, the platform's native asset, plummeted by more than 90% in a day, reaching around $0.001578. This caused panic among investors and raised questions about the security of treasuries in DeFi projects. Some analysts, such as those from Whale Alert, suggest that the attack may have been a "well-known vector," but details are still being clarified.

Step Finance is a popular platform on Solana that provides tools for portfolio monitoring, analytics, and trading. Founded in 2021, it is integrated with other ecosystem projects like Remora Markets and Solana Floor. This incident highlights the vulnerability of even experienced platforms and serves as a reminder of the need to strengthen security measures, such as cold wallets and multi-factor authentication.

The team promises updates on the investigation. Investors are advised to follow official channels and avoid suspicious transactions.