Connect with us

Crypto World

How a Wallet Compromise Killed the Solana DeFi Aggregator

Published

on

How a Wallet Compromise Killed the Solana DeFi Aggregator


After exploring fundraising and acquisition options, the teams concluded that no sustainable recovery path existed following the breach.

Solana-based DeFi aggregator, Step Finance, along with two other affiliate projects, SolanaFloor and Remora Markets, announced plans to shut down all operations with immediate effect.

The decision follows the aftermath of a major security incident earlier this year.

Advertisement

Hack, Halt, Shutdown

In a statement shared on X, the teams said the decision came after exploring multiple paths forward, including fundraising and acquisition discussions. However, none resulted in a viable solution after the hack that occurred in late January.

The incident involved an estimated $30 million in assets being drained from Step Finance’s wallets on the Solana network. Subsequent disclosures indicated that the breach stemmed from compromised devices belonging to members of the project’s executive team.

Access to these devices likely exposed private keys or enabled malware that interfered with internal transaction approval processes, which allowed attackers to initiate and approve malicious on-chain transactions. Once access was obtained, the attackers unstaked roughly 261,854 SOL and transferred the funds out of project-controlled wallets. This triggered an immediate market reaction that saw the STEP token fall by more than 80%.

Following detection of the exploit, the team halted certain components of the platform to limit further damage and later reported that approximately $4.7 million in Remora-related assets and other holdings were recovered. As part of the shutdown process, Step Finance said it is working on a buyback program for STEP token holders based on a snapshot taken prior to the incident, while Remora Markets is preparing a redemption process for rToken holders.

Advertisement

Over 200 Hack Incidents in 2025

The hack involving Step Finance ranked among the most expensive DeFi incidents in January 2026, amidst a broader rise in crypto-related losses over the past year. According to data from blockchain security firm PeckShield, scams and hacks drained more than $4.04 billion from users and platforms in 2025, which is an increase of almost 34% compared to 2024.

You may also like:

Of that total, $2.67 billion was attributed to hacks, while $1.37 billion originated from scams, as scam-related losses rose about 64% year-on-year.

PeckShield found a pivot from purely technical exploits toward targeted social engineering, often aimed at centralized entities and high-value individuals, thereby resulting in higher losses per incident. More than 200 hack cases were recorded during the year, excluding scams.

February stood out as the costliest month, driven by a $1.51 billion breach at Bybit.

Advertisement
SPECIAL OFFER (Exclusive)

Binance Free $600 (CryptoPotato Exclusive): Use this link to register a new account and receive $600 exclusive welcome offer on Binance (full details).

LIMITED OFFER for CryptoPotato readers at Bybit: Use this link to register and open a $500 FREE position on any coin!

Source link

Advertisement
Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Crypto World

Ethereum Smart Accounts Coming in Hegota Fork

Published

on

Ethereum Smart Accounts Coming in Hegota Fork

Ethereum account abstraction, or smart accounts, will be shipped with the Hegota upgrade “within a year,” said Vitalik Buterin on Saturday.

“We have been talking about account abstraction ever since early 2016,” said the Ethereum co-founder over the weekend. 

He added that now, “we finally have EIP-8141, an omnibus that wraps up and solves every remaining problem that AA [account abstraction] was intended to address (plus more),” and it is slated for deployment this year.  

“Finally, after over a decade of research and refinement of these techniques, this all looks possible to make happen within a year (Hegota fork).”

The core concept is “about as simple as you can get while still being highly general purpose,” using “frame transactions,” explained Buterin. 

Advertisement

Instead of a transaction being a single operation, it becomes a sequence of “frames” that can reference each other’s data, and each frame can signal authorization of a sender or gas payer. 

A core principle of cypherpunk Ethereum

Smart accounts with multi-signatures, quantum-resistant wallets, and accounts with changeable keys work by having a validation frame, which checks the signature and approves it, followed by an execution frame. 

Paying gas in non-ETH tokens can be done via a “paymaster contract” or a special-purpose decentralized exchange that provides Ether (ETH) in real time, with no intermediaries required, which is a big deal for Ethereum’s ethos, said Vitalik.  

“Intermediary minimization is a core principle of non-ugly cypherpunk Ethereum: maximize what you can do even if all the world’s infrastructure except the Ethereum chain itself goes down.”

Related: Vitalik Buterin outlines quantum resistance roadmap for Ethereum

Advertisement

Buterin explained that this was also a big deal for privacy protocol users, as it means they can completely remove “public broadcasters” that are the “source of massive UX pain” in privacy platforms such as Railgun and Tornado Cash, and replace them with a “general-purpose public mempool.”

Native account abstraction is expected in the second half of 2026, according to the “Strawmap.” Source: Ethereum Foundation

Quantum-resistant Ethereum in the pipeline

All Ethereum accounts, including existing ones, can be put into the same framework and gain the ability to do batch operations and transaction sponsorship, he said. 

The Ethereum co-founder posted his quantum resistance roadmap for Ethereum on Thursday, stating that the four areas of concern were validator signatures, data storage, user account signatures, and zero-knowledge proofs.

He also said that he expects to see “progressive decreases” of both slot time and finality time in the longer-term scaling roadmap. 

Magazine: 6 massive challenges Bitcoin faces on the road to quantum security

Advertisement