Step Finance, a popular Solana-based DeFi portfolio tracker, is shutting down after a major security breach. The company announced today that it, along with SolanaFloor and Remora Markets, will cease operations after a hack in January 2026 drained approximately $30 million in assets. Unlike the vulnerabilities of smart contracts, the hack targeted compromised devices, exposing endpoint security risks in the crypto infrastructure.
🚨 UPDATE: Step Finance, SolanaFloor and Remora Markets confirm closure after January hack, with a buyback planned for STEP holders. pic.twitter.com/S6s6DKPP82
— Cointelegraph (@Cointelegraph) February 24, 2026
Step Finance suffers major losses after hack
The breach involved the theft of 261,854 SOL, a significant blow to one of Solana’s core DeFi tools. Many users relied on Step Finance to track their portfolios and manage digital assets across multiple platforms. The incident highlights the risks associated with endpoints such as personal devices and wallets, rather than flaws in the blockchain itself.
Buyback program for STEP token holders
Despite the closure, Step Finance is offering a buyback program for STEP token holders. The program uses a snapshot before the hack to calculate the recoverable amounts. While this won’t completely replace the lost assets, it does demonstrate the team’s commitment to the community. The initiative aims to provide partial recovery and maintain trust among loyal users even when the project ends.
Lessons for Solana users
This STEP hack serves as a stark reminder of the security risks in the crypto ecosystem. Users should remain vigilant, carefully secure devices and wallets, and consider endpoint vulnerabilities when interacting with DeFi platforms. For Solana and other blockchains, incidents like these highlight the importance of robust security measures that go beyond smart contracts.
The closure of Step Finance and the impact on the community
In short, the closure of Step Finance, SolanaFloor, and Remora Markets marks a major shakeup in the Solana DeFi ecosystem. While the buyback program provides some relief, the event underlines the growing need for stronger security protocols and risk awareness. Communities and investors alike will be closely watching how Solana-based tools recover from this loss.

