TLDR
Several Solana DeFi platforms are shutting down after a roughly 27 to 29 million dollar treasury hack at Step Finance, highlighting security and business stress across DeFi.
- Step Finance, SolanaFloor and Remora Markets are winding down after a hack drained about 261,854 SOL from Steps treasury wallets.
- This comes on top of other DeFi closures like ZeroLend, Alpaca Finance and Polynomial, pointing to fragile economics and rising security costs.
- Users should watch how projects handle treasuries, promised redemptions and overall Solana DeFi liquidity before treating this as a contained event.
Deep Dive
1. What Happened In The 29M Hack
Solana portfolio tracker Step Finance (STEP) suffered a late January breach of its treasury wallets, with 261,854 SOL stolen, worth about 27 to 29 million dollars at the time, according to multiple reports.
After exploring financing and acquisition options, Step said it could not find a viable path and chose to shut down operations immediately, including affiliated projects SolanaFloor and Remora Markets. This is described in detail in a Decrypt summary of the closures and hack impact on STEP holders.
The team plans a buyback for STEP holders based on a pre hack snapshot, while Remora rTokens remain redeemable 1:1 for USDC, as outlined in the same DeFi closure recap.
A single treasury level compromise, even without user contract drains, can be fatal when a project lacks deep capital or backers willing to recapitalize it quickly.
2. DeFi Closures Beyond Step Finance
Coverage of the Step incident explicitly frames it as part of a broader wave of DeFi shutdowns, including lending platform ZeroLend, leveraged yield protocol Alpaca Finance and options protocol Polynomial, all closed or winding down recently.
These projects cite a mix of falling on chain activity, fragmented liquidity, unsustainable token incentives and rising security and infrastructure costs as reasons for closure, alongside direct hacks in some cases.
A Bitcoinist piece on the Step exploit calls the event an example of how an unrecoverable treasury loss can push multiple interconnected products into a coordinated shutdown, rather than an isolated failure in a single app.
The headline is not just about one exploit, it reflects stress in DeFi business models where fees and emissions often do not cover security and data costs.
3. Key Risks And What To Watch Next
For users, the immediate practical issue is redemptions and snapshots. STEP holders and Remora rToken holders need to track the announced buyback and redemption processes and verify official channels before acting.
At a system level, this raises questions about treasury management in DeFi. The exploit reportedly involved unstaked coins moved from treasury wallets, which functions more like centralized custody than trustless smart contract logic.
On Solana specifically, articles note that DeFi total value locked has already fallen significantly from prior peaks; a prominent aggregator shutting down could further dent sentiment or shift flows to remaining dashboards and protocols.
When evaluating DeFi projects, it is increasingly important to understand who controls the treasury, how keys are secured, and whether the underlying business can survive a major security or market shock.
Conclusion
A roughly 29 million dollar treasury hack at Step Finance did not just kill one Solana app, it wiped out an entire mini group of services and added to a growing list of DeFi closures. The incident underscores that security, treasury design and sustainable revenues now matter as much as innovation, and users who care about durability should focus on how protocols manage these fundamentals, not just on yields or token narratives.
CoinsKid.Com