Step Finance

Step Finance is no longer operating. The Solana portfolio dashboard, founded in 2021, announced on February 23, 2026 that it was ending all operations, along with its sister brands SolanaFloor and Remora Markets. The shutdown followed a January 31, 2026 security breach in which about $40 million was drained from the company's treasury.

What Step Finance was

Step Finance was one of the earliest consumer applications on Solana. It began in 2021 as a portfolio dashboard that pulled a wallet's yield farms, liquidity provider (LP) tokens and other DeFi positions into one view, according to CoinDesk. The project called itself "The Front Page of Solana." In its farewell post the team described it as "the first and best portfolio tracker for Solana," and said it launched alongside Raydium and Orca as one of the network's first major projects.

The company grew into a group of Solana businesses, which its farewell post lists:

• Step dashboard: the core portfolio tracker, later joined by analytics dashboards and data APIs.
• SolanaFloor: a Solana-focused news and media outlet.
• Solana Crossroads: a community conference.
• Remora Markets: a platform issuing tokenized real-world assets as "rTokens," such as tokenized stocks and metals. Step Finance acquired it, per The Record. Step described itself as Remora's largest liquidity provider.

The project had a native token, STEP, plus a staked version called xSTEP. The STEP token reached an all-time high of about $10.2 in April 2021, according to The Block.

The January 2026 breach

On January 31, 2026, attackers took control of several Step Finance treasury and fee wallets. In its official statement, the team said about $40 million was drained "as a result of our executive team's devices being compromised." The attack targeted team devices, not a smart contract. CoinDesk reported that 261,854 SOL, worth about $27 million at the time, was among the stolen assets. The roughly $40 million figure covers all assets taken.

The team said it recovered about $3.7 million in Remora assets and about $1 million in other positions. It credited Token-2022 security features and fast coordination with partners for those recoveries. It notified law enforcement, and it said Remora Markets was isolated from the incident and that rTokens stayed backed 1:1 by custodied collateral.

The STEP token fell sharply after the hack. CoinDesk reported that it lost nearly 96% of its value after the incident and dropped another 36% in the 24 hours after the shutdown news.

Shutdown and wind-down

On February 23, 2026, the team said it had "explored every possible path forward, including financing and acquisition opportunities," but could not secure a viable outcome. It ended operations for Step Finance, SolanaFloor and Remora Markets "effective immediately." At the same time, it promised a buyback for STEP holders based on a snapshot taken before the hack, and a redemption process for Remora rToken holders.

The wind-down then proceeded in these steps:

• March 20, 2026: Kraken disabled STEP deposits and trading, citing the project's announced shutdown. It liquidated remaining balances in late June 2026.
• March 26, 2026: Step opened a claim portal for anyone who held STEP or xSTEP as of the January 30, 2026 snapshot. The portal stayed open for about a month.
• April 25, 2026: The claim window closed.
• April 29, 2026: The team announced that the claims process had ended and that payouts had been sent to everyone who filed an eligible claim.

As of September 2026, the step.finance website returns an HTTP 404 error and the docs.step.finance domain no longer resolves. The official X account (@StepFinance_) still posts now and then, but it has not announced any new products or plans to resume operations.

Place in the Solana ecosystem

Step Finance was one of the first widely used portfolio dashboards on Solana, and it lasted from the network's 2021 DeFi boom into 2026. Toward the end, the group had moved into media, events and tokenized real-world assets through SolanaFloor, Solana Crossroads and Remora Markets. The company was not shut down by a protocol bug. It closed because of an operational security failure: compromised team devices gave attackers access to its treasury and fee wallets. Anyone who still holds STEP should note that the claim program based on the pre-hack snapshot has ended, and that the project no longer runs any active products.