Solana-based DeFi entity, Step Finance, is now examining a key security breach on its platform. Specifically, Step Finance has incurred a staggering $29M loss due to the breach that targeted its fee and treasury wallets. As per the data from CertiK, a well-known blockchain security entity, the incident took into account the unstaking as well as transaction of up to 261,854 $SOL, equaling a value of $29M. Keeping this in view, Step Finance has urged cybersecurity entities to help with the current investigation.
We are contacting Cybersecurity firms to assist.
Any firms who can assist feel free to slide into DMshttps://t.co/uNN5l6TYVL
— Step☀️ (@StepFinance_) January 31, 2026
Step Finance Starts Investigation of Latest $29M Treasury Wallet Breach
The on-chain data suggests that Step Finance’s compromised wallets were included in its treasury holdings. At the moment, the platform has not confirmed whether an access control vulnerability or a smart contract lapse led to the incident. However, it has stressed the ongoing investigation to find out the reason and the adequate solutions to prevent further breaches. After the incident, Step Finance’s native $STEP token, which drives its staking rewards and governance, has plunged by over 60%, reaching the price level of $0.023.
After Step Finance’s launch back in 2021, the platform has been providing an inclusive portfolio management framework with the aggregation of yield farms, LP tokens, and positions existing across up to ninety-five percent of the protocols on Solana. Additionally, the platform runs SolanaFloor, a Solana-centered news outlet, while also hosting the yearly Solana Crossroads conference that is held in Istanbul. At present, its team is actively engaging with diverse cybersecurity specialists expedite the investigation.
Rising Solana Exploits Trigger Wider Concerns
Moreover, the company has assured the community to provide more information in the near term. The Step Finance breach reflects the rising pattern of exploits that are impacting Solana-based projects. Back in April last year, Loopscale, a lending protocol, lost up to $5.8M because of an exploit just after launch. Additionally, CrediX underwent a $4.5M breach in August. Moving on, in November, Upbit, a South Korean exchange, suffered a $37M hack that impacted diverse Solana assets.