Solana DeFi platform step finance hit by $27 million treasury hack as token price craters

February 1, 2026 - 04:27

The decentralized finance (DeFi) ecosystem on the Solana blockchain was shaken by a significant security breach targeting Step Finance. The platform, which aggregates Solana-based DeFi transactions, confirmed its treasury was compromised, leading to an estimated loss of approximately $27 million.

Preliminary investigations suggest the exploit involved a vulnerability in a newly deployed smart contract. This allowed an attacker to drain a substantial portion of the platform's treasury assets. The team has urgently advised users to revoke permissions for all Step Finance-related connections as a precautionary measure while the breach is contained.

In immediate reaction to the news, the platform's governance token, STEP, experienced a catastrophic decline. Its price cratered by over 80% in the wake of the announcement, devastating the project's total market value and eroding investor confidence. The incident underscores the persistent security challenges within the rapidly evolving DeFi sector, where protocol vulnerabilities can lead to immediate and severe financial consequences.

The Step Finance team has stated that a comprehensive post-mortem analysis is underway. Their immediate focus remains on securing the protocol and determining the full scope of the incident. The exploit serves as a stark reminder for users to exercise caution and for projects to prioritize rigorous security audits, especially when implementing upgrades or new contract features.