TLDR
Three major Solana DeFi platforms are shutting down after a late?January hack on Step Finances treasury wallets.
- Step Finance, SolanaFloor, and Remora Markets are all winding down after a roughly $2740 million theft from Steps wallets.
- Users of STEP and Remora rTokens are promised a buyback and redemption process based on pre?hack snapshots, while the STEP token has collapsed in value.
- The incident highlights operational security risks and adds pressure to Solana DeFi, but early reports say the direct impact on SOL price has been relatively limited so far.
Deep Dive
1. What Was Hacked And Who Is Closing?
Solana DeFi portfolio manager Step Finance (STEP) suffered a security breach on 31 Jan 2026 that drained about 261,854 SOL, worth roughly $2730 million at the time, from its treasury and fee wallets according to multiple reports, including Cointelegraph and CoinDesk.Step Finance hack and shutdown
Investigations say attackers compromised devices used by Steps executives, then moved funds from custodial wallets, meaning the exploit hit operational infrastructure rather than smart contracts.Endpoint compromise details
Unable to raise replacement capital or sell the business, Step Finance announced an immediate shutdown of its core platform and subsidiaries SolanaFloor (analytics and media) and Remora Markets (tokenized stock marketplace).
A single treasury?wallet compromise at a key aggregator has taken out multiple Solana ecosystem services in one blow, even though the underlying Solana network and DeFi protocols were not hacked.
2. What Happens To Users And Tokens?
After the hack, STEP fell around 9697% from pre?incident levels and dropped further on the shutdown announcement, leaving little economic value in the token.Token collapse and closure terms
Step Finance says it will run a buyback for STEP holders based on a snapshot taken before the exploit; details and timelines are still being prepared. Remora Markets states its rTokens remain backed 1:1 and will be redeemable for USDC via a dedicated process.
SolanaFloor will stop publishing new content but aims to keep its archives online for historical reference.SolanaFloor wind?down context
Impacted users should focus on the official snapshot, buyback, and rToken redemption instructions and treat any third?party recovery offers with extreme skepticism.
3. Impact On Solana DeFi And SOL
Reports note that the shutdown adds to a broader pattern of DeFi closures, with other projects like ZeroLend and Alpaca Finance also exiting amid security and business?model pressure.Broader DeFi shutdown trend
For Solana specifically, Step Finance was often called the front page of Solana, aggregating positions across most major protocols, so its loss is a hit to user tooling and sentiment.Ecosystem role and price context
However, coverage so far describes SOLs price reaction as relatively muted, with key support levels still roughly intact, suggesting the market views this more as a project?level failure than a chain?level one.
For Solana users, the key watchpoints are replacement dashboards, any further security incidents, and whether DeFi TVL and activity stabilize or continue to trend lower.
Conclusion
Step Finances shutdown shows how a single operational hack on a major treasury can force multiple Solana DeFi platforms to close, even with smart contracts intact. The direct-chain impact on SOL looks contained for now, but the episode reinforces that DeFi risk is not only about protocol code, it is also about how teams secure keys, devices, and treasury operations.
CoinsKid.Com