STEP token tumbles as platform announces shutdown and buyback plan after treasury loss.

Solana DeFi platform Step Finance announced it is immediately ceasing operations after a security breach.

Key Takeaways

• Step Finance halted operations after a 40 million hack. Subsidiaries like SolanaFloor and Remora were also suspended due to a funding shortage.
• The company plans a buyback program for STEP holders based on a snapshot taken before the January 31 incident.
• After noting the security breaches and liquidity risks exposed by Step, the STEP token value dropped by 80-90%.

What is Step Finance?

Step Finance is a comprehensive portfolio dashboard and analytics tool built on the Solana blockchain. It is designed to help users visualize, analyze, and manage their decentralized finance (DeFi) assets, including tokens, NFTs, liquidity pools, and yield farming positions. STEP is the native token used for staking to earn a share of protocol fees and for governance.

Step Finance Shutdowns Following Security Breach

Step Finance announced in an X post on Monday, February 23, that the firm is terminating all its operations. The decision came after a major hack, resulting in the loss of about 261,854 SOL tokens worth $40 million. The shutdown also includes its subsidiaries for news and analytics, SolanaFloor, as well as the tokenized equities trading platform Remora Markets.

Reason For the Shutdown

The Step Finance shutdown goes back to January 31, when Step Finance disclosed that several treasury and fee wallets had been compromised by a “sophisticated actor.”

In November 2025, Step Finance announced a restructuring, removing key products like Step Dashboard, APIs, and Mobile App. It cited high maintenance costs and challenges in monetization as reasons. However, a $30 million SOL wallet breach in January impacted the company’s financial stability. All these conditions made it difficult for SolanaFloor to continue its operations.

To mitigate losses, the company has considered various options, including mergers and developing new business models. No solutions were found to restore the financial stability. The company stated that the viable solution was to end all operations immediately.

The attack reportedly compromised devices linked to executives, enabling hackers to access treasury wallets, which eventually led to a multimillion-dollar loss. The attackers gained access to the treasury and fee wallets, giving them control to move and withdraw substantial amounts of assets. The breach was quite massive as Step Finance mainly depended on treasury resources to support operations and ecosystem expansion.

Step Finance Announced Buybacks

As mentioned earlier, Step Finance also announced the shutdown of Remora Markets, a blockchain-based platform that tokenizes traditional securities and real-world assets (RWAs) to enable 24/7 trading on the Solana network.

The company is working on a buyback for STEP token holders using a pre-incident snapshot and a redemption process for Remora rToken holders, fully backed 1:1. It also establishes a process for holders to redeem them for USDC.

“All Remora rTokens remain fully backed 1:1,” the company said, and also added that more information will be shared in the coming weeks.

SolanaFloor also said that it will stop publishing new content but keep the existing website, videos, and newsletters online as an archive. The shutdown affects several products, including portfolio tracking tools, market data services, and tokenized equity products.

Final Thoughts

According to market analysts, the fall of Step Finance is one of the biggest platform failures of 2026. They also pointed out that weakness outside the blockchain can be catastrophic, similar to smart contracts. The established platforms also remain vulnerable when internal controls are inefficient and not strong enough. Step Finance’s native token, STEP, has plunged by nearly by 97% following the announcement.