Major Solana Platforms Shut Down After $27M Hack
Three foundational platforms in the Solana ecosystem, including DeFi aggregator Step Finance and analytics site SolanaFloor, have ceased operations following a $27 million treasury exploit. The hack caused the STEP token to crash by 96%, prompting the team to announce buyback and redemption plans. This infrastructure shock has heightened concerns across the ecosystem regarding protocol security and custody.
- The security breach was not a smart contract exploit, but rather an operational failure where attackers compromised devices belonging to the executive team to access treasury wallets. - Initial estimates placed the loss at 261,854 SOL (worth approximately $27.2 million at the time), but later assessments by the Step Finance team confirmed the total damages were closer to $40 million. - In response to the exploit, the price of the native STEP token plummeted by over 96%, erasing the majority of its market value and severely hindering the project's ability to raise new capital. - The shutdown affects the entire Step Finance ecosystem, including the popular SolanaFloor news and analytics platform and the Remora Markets lending protocol. - SolanaFloor will no longer publish new content; however, its existing articles, videos, and newsletters will be preserved as a public archive. - Step Finance has announced plans for a buyback program for STEP token holders, which will be based on a wallet snapshot taken before the January 31st hack. - Holders of Remora's rTokens will be able to redeem them for USDC, as the team confirmed these assets remain fully backed on a 1:1 basis and were isolated from the main treasury exploit. - This incident highlights a growing trend of hackers targeting operational security, such as private key management and device security, rather than solely focusing on on-chain smart contract vulnerabilities.
