Connect with us

Crypto World

How a Wallet Compromise Killed the Solana DeFi Aggregator

Published

on

How a Wallet Compromise Killed the Solana DeFi Aggregator


After exploring fundraising and acquisition options, the teams concluded that no sustainable recovery path existed following the breach.

Solana-based DeFi aggregator, Step Finance, along with two other affiliate projects, SolanaFloor and Remora Markets, announced plans to shut down all operations with immediate effect.

The decision follows the aftermath of a major security incident earlier this year.

Advertisement

Hack, Halt, Shutdown

In a statement shared on X, the teams said the decision came after exploring multiple paths forward, including fundraising and acquisition discussions. However, none resulted in a viable solution after the hack that occurred in late January.

The incident involved an estimated $30 million in assets being drained from Step Finance’s wallets on the Solana network. Subsequent disclosures indicated that the breach stemmed from compromised devices belonging to members of the project’s executive team.

Access to these devices likely exposed private keys or enabled malware that interfered with internal transaction approval processes, which allowed attackers to initiate and approve malicious on-chain transactions. Once access was obtained, the attackers unstaked roughly 261,854 SOL and transferred the funds out of project-controlled wallets. This triggered an immediate market reaction that saw the STEP token fall by more than 80%.

Following detection of the exploit, the team halted certain components of the platform to limit further damage and later reported that approximately $4.7 million in Remora-related assets and other holdings were recovered. As part of the shutdown process, Step Finance said it is working on a buyback program for STEP token holders based on a snapshot taken prior to the incident, while Remora Markets is preparing a redemption process for rToken holders.

Advertisement

Over 200 Hack Incidents in 2025

The hack involving Step Finance ranked among the most expensive DeFi incidents in January 2026, amidst a broader rise in crypto-related losses over the past year. According to data from blockchain security firm PeckShield, scams and hacks drained more than $4.04 billion from users and platforms in 2025, which is an increase of almost 34% compared to 2024.

You may also like:

Of that total, $2.67 billion was attributed to hacks, while $1.37 billion originated from scams, as scam-related losses rose about 64% year-on-year.

PeckShield found a pivot from purely technical exploits toward targeted social engineering, often aimed at centralized entities and high-value individuals, thereby resulting in higher losses per incident. More than 200 hack cases were recorded during the year, excluding scams.

February stood out as the costliest month, driven by a $1.51 billion breach at Bybit.

Advertisement
SPECIAL OFFER (Exclusive)

Binance Free $600 (CryptoPotato Exclusive): Use this link to register a new account and receive $600 exclusive welcome offer on Binance (full details).

LIMITED OFFER for CryptoPotato readers at Bybit: Use this link to register and open a $500 FREE position on any coin!

Source link

Advertisement
Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Crypto World

Bitcoin ETFs post $787M inflows, break outflow streak

Published

on

Bitcoin ETFs flow weekly

Bitcoin ETFs recorded $787.31 million in net inflows for the week ending February 27, reversing the prior week’s $315.86 million in outflows.

Summary

  • Bitcoin ETFs posted $787M in weekly inflows, ending four red weeks.
  • Three-day buying wave added $1.02B, led by a $506M peak day.
  • Cumulative net inflows dipped slightly to $54.8B despite rebound.

The positive weekly flow came from three consecutive days of strong buying from February 24-26, totaling $1.02 billion, which offset outflows on February 23 and 27.

Bitcoin traded at $66,000 with gains of 1.7% over 24 hours following the weekly ETF reversal. The asset traded in a 24-hour range of $63,176 to $67,039.

Advertisement

Total net assets reached $83.40 billion while cumulative total net inflow stood at $54.80 billion.

Buying wave drives $1.02 billion in Bitcoin ETFs inflow

February 25 posted the week’s strongest single-day performance with $506.51 million in inflows.

February 26 added $254.46 million while February 24 contributed $257.71 million. The three-day streak brought $1.02 billion into Bitcoin ETF products.

Advertisement

February 23 recorded $203.82 million in outflows before the buying wave began. February 27 posted $27.55 million in redemptions, ending the three-day positive streak.

Bitcoin ETFs flow weekly
Bitcoin ETF data

Weekly trading volume reached $15.99 billion for the period ending February 27, down from $22.87 billion during the week ending January 30.

Total net assets climbed from $85.31 billion on February 20 to $83.40 billion on February 27, showing a drop from the week’s peak despite positive flows.

Weekly reversal breaks four-week outflow streak

The $787.31 million weekly inflow was the first positive week since late January. The four prior weeks posted consecutive outflows.

Advertisement

That was $315.86 million for the week ending February 20, $359.91 million ending February 13, $318.07 million ending February 6, and $1.49 billion ending January 30.

The five-week outflow period from late January through mid-February totals approximately $2.48 billion before this week’s reversal.

Cumulative total net inflow fell from $55.01 billion on January 30 to $54.80 billion on February 27.

Advertisement

Source link

Continue Reading

Crypto World

Polymarket racks up $50M bets as tensions rage on

Published

on

Trending Polymarket bets as of Sunday morning. (Polymarket)

It took Polymarket less than 24 hours to turn a Middle Eastern war into a trading floor.

Since the U.S. and Israel launched strikes on Iran Saturday, the prediction market has seen a flood of new contracts covering everything from ceasefire timelines to whether the Iranian regime will collapse by June.

The speed and specificity of the markets is striking. Bettors aren’t just wagering on whether the conflict escalates, but pricing the week it ends, who replaces Khamenei, and whether U.S. ground forces enter Iran by March 7.

Trending Polymarket bets as of Sunday morning. (Polymarket)

Polymarket’s largest completed market is “Khamenei out as Supreme Leader of Iran by March 31?” which resolved to 100% after Iranian state TV confirmed his death.

The contract pulled $45 million in volume, making it one of the most-traded geopolitical markets in the platform’s history. The top trader, an account called ‘Curseaaaaaaa,’ made $757,000 on a Yes bet. Four other traders each cleared six figures.

Advertisement
(Polymarket)

The chart on that market hovered between 25% and 50% through January and February as tensions built, then spiked vertically to 100% when confirmation came through.

Now the action has shifted to what comes next.

The ceasefire market gives just a 4% chance of a U.S.-Iran ceasefire by March 2 and 15% by March 6, but jumps to 61% by March 31 and 78% by April 30. Bettors are pricing a resolution within weeks, not months, consistent with bitcoin’s bounce to $68,000 on the same thesis.

(Polymarket)

“Will the Iranian regime fall by June 30?” sits at 54%, up sharply from the low-20s where it had traded for months. The “Next Supreme Leader of Iran” market gives a 30% chance to “position abolished” entirely, meaning bettors see nearly a one-in-three shot that the theocratic structure itself doesn’t survive. Ali Larijani, a former parliament speaker, leads the named candidates at 21%.

The ground invasion contracts are pulling real volume too. “Will the U.S. invade Iran before 2027?” trades at 19% with $207,000 in volume, while “US forces enter Iran by March 7” sits at 28% with $2 million traded.

What Polymarket is doing here is something traditional markets structurally cannot. Equity and oil futures don’t reopen until Sunday evening, but on Polymarket, anyone with a crypto wallet can take a position on Iranian regime change on a casual weekend and see real-time pricing from thousands of other participants doing the same thing.

Advertisement

But the most striking activity may have happened before the first missiles landed.

Onchain analytics firm Bubblemaps on Saturday identified six wallets that collectively netted $1.2 million in profit by betting on a U.S. strike on Iran by February 28, the exact day the strikes occurred.

Most of the wallets were funded within 24 hours of the attack, bet specifically on the Feb. 28 contract rather than broader timeframes, and purchased “yes” shares hours before the military operation began. The largest single wallet turned roughly $61,000 into over $493,000 in profit. A second netted approximately $120,000 from a $30,000 position.

The platform is aware of the optics, meanwhile.

Advertisement

Polymarket added a note to its Middle East markets on Sunday stating that “the promise of prediction markets is to harness the wisdom of the crowd to create accurate, unbiased forecasts for the most important events to society,” adding that after speaking with people directly affected by the attacks, it found that prediction markets “could give them the answers they needed in ways TV news and X could not.”

Source link

Continue Reading

Crypto World

Vitalik Buterin Says Ethereum Smart Accounts Are Coming Within a Year

Published

on

Crypto Breaking News

Ethereum (CRYPTO: ETH) is on track to roll out native account abstraction as part of the Hegota upgrade, with timing that insiders say could land within a year. Vitalik Buterin outlined that smart accounts—often described as account abstraction—will be delivered once EIP-8141, the omnibus proposal consolidating the remaining AA challenges, is deployed. The push marks a significant shift in how users interact with on-chain transactions, moving away from single-step operations toward a more modular, frame-based approach. The idea is to simplify user experiences, reduce reliance on external custodians, and preserve Ethereum’s core ethos of permissionless, censorship-resistant finance. The timeline and the scope of EIP-8141 place the project squarely in the crosshairs of developers and wallet builders seeking a more flexible, secure transaction model for the network and its users.

“We have been talking about account abstraction ever since early 2016,” Buterin said over the weekend, signaling that the long arc of research is now converging on a deployable design. The release would introduce a framework in which a transaction is not a single operation but a sequence of interlinked steps, or “frames,” that can reference one another and indicate who pays the gas or authorizes the sender. This framing enables a wide range of use cases, from multi-signature wallets to quantum-resistant security models, while keeping the pipeline of on-chain validation efficient and scalable.

“Finally, after over a decade of research and refinement of these techniques, this all looks possible to make happen within a year (Hegota fork).”

The core concept is meant to be as simple as possible while retaining broad generality. The frame-transaction architecture lays out an execution plan in which each frame contributes a piece of the final outcome, and each frame’s authorization can be bundled into a larger, privacy-preserving sequence. This design is not just about reducing the number of steps; it aims to enable sophisticated flows while maintaining a developer-friendly model that can be adopted by wallets, dApps, and infrastructure providers alike.

A core principle of cypherpunk Ethereum

At the heart of the proposal lies a rebalance of how validation and execution happen. Smart accounts, including multisig configurations, quantum-resistant wallets, or keys that can be changed over time, rely on a validation frame to verify signatures and authorize actions, followed by an execution frame that carries out the operation. The arrangement is intended to minimize the number of required intermediaries while maximizing what users can accomplish even if traditional infrastructure becomes unavailable. In practical terms, gas could be paid in non-ETH tokens through a paymaster contract, or via a specialized decentralized exchange that provides real-time Ether without intermediaries—an arrangement that aligns with Ethereum’s cypherpunk ethos of resilience and user sovereignty.

Advertisement

“Intermediary minimization is a core principle of non-ugly cypherpunk Ethereum: maximize what you can do even if all the world’s infrastructure except the Ethereum chain itself goes down.”

The design also speaks directly to the privacy dimension of on-chain activity. If the model is adopted widely, privacy-focused protocols could reduce or redefine their reliance on public broadcasting networks that have historically caused UX pain. Instead, a general-purpose public mempool could serve as a more flexible, scalable substrate for private transactions, potentially making privacy tools more practical for everyday users. In the long run, this could influence how privacy layers and wallets interact with the base chain, offering smoother, more interoperable experiences while preserving strong cryptographic guarantees.

Native account abstraction is expected to be delivered in the latter half of 2026 according to the Strawmap projection maintained by the Ethereum Foundation. The Strawmap estimates are widely watched because they reflect community expectations about when core features might land across the ecosystem, including developments around account abstraction and related scaling improvements. The projection underscores the sense that AA is moving from concept to implementation, with multiple development tracks converging around a unified upgrade path.

Quantum-resistant Ethereum in the pipeline

Buterin stressed that the AA framework could accommodate all existing accounts, enabling batch operations and transaction sponsorship while maintaining a consistent security model. In the same thread, he outlined a broader quantum resistance roadmap for Ethereum, identifying four critical areas: validator signatures, data storage, user account signatures, and zero-knowledge proofs. The emphasis on quantum safety reflects a growing consensus that post-quantum cryptography will be essential as computing capabilities evolve and adversaries potentially gain access to more powerful attack vectors.

On the scaling front, Buterin suggested that progress toward shorter slot times and faster finality could come progressively as part of a broader, longer-term roadmap for a faster, more efficient Ethereum. The roadmap envisions incremental improvements that reduce latency and increase throughput without compromising security, a balance that has long been a central challenge for the network’s developers.

Advertisement

As the discussion around quantum resistance evolves, the broader ecosystem is watching for practical implementations that could integrate with existing protocols. The quantum-resistance conversation complements the AA push by emphasizing stronger, future-proof cryptography that can withstand emerging threats while preserving user control and network performance. The combined trajectory—account abstraction paired with quantum-safe measures—signals a holistic approach to Ethereum’s evolution, one that seeks to marry user-centric design with durable security guarantees.

In private discussions and public threads, researchers have highlighted quantum resistance as a multi-faceted problem: it involves updating validator signatures, supporting larger data-collection capabilities for verification, ensuring robust user signatures, and deploying advanced zero-knowledge proofs that can operate efficiently in a post-quantum world. While these are technical milestones, they carry practical implications for wallet developers, validators, and users who expect faster, cheaper, and more private interactions on the network.

In sum, the push for account abstraction, reinforced by the EIP-8141 consolidation and a quantum-ready roadmap, marks a notable inflection point for Ethereum. The combination of frame-based transactions, gas sponsorship mechanisms, and privacy-oriented optimizations could redefine how users engage with decentralized applications, lowering barriers to entry while enhancing security and resilience. The community is watching closely as milestones move from theoretical proposals to real-world deployments, with the Strawmap timeline offering a rough guide to when broader AA features may begin to impact wallets, dApps, and users across the ecosystem.

Risk & affiliate notice: Crypto assets are volatile and capital is at risk. This article may contain affiliate links. Read full disclosure

Advertisement

Source link

Continue Reading

Crypto World

What next as BTC tops $68,000 after Iran confirms Khamenei death

Published

on

What next as BTC tops $68,000 after Iran confirms Khamenei death

Bitcoin jumped to $68,000 early Sunday, recovering nearly all of Saturday’s war-driven losses within hours of Iranian state TV confirming that Supreme Leader Ayatollah Ali Khamenei was killed in U.S. and Israeli airstrikes.

Khamenei held ultimate authority over Iran’s military, foreign policy, and nuclear program. Under Iran’s constitution, a temporary council of the president, head of the judiciary, and a Guardian Council jurist assumes leadership duties until the Assembly of Experts appoints a successor.

U.S. president Donald Trump, meanwhile, has urged Iranians to overthrow the regime, calling this “probably your only chance for generations.” Tehran has continued firing missiles at Israel, and Israeli strikes on Iran are ongoing. Whether a period of mourning affects military operations remains unclear.

Trump added U.S. attacks would continue for as long as necessary.

Advertisement

But bitcoin moved before any of those questions were answered. The $64,000 to $68,000 swing happened on thin Sunday liquidity, driven by a single headline. That’s a roughly $80 billion market cap move in hours.

The read across crypto and broader risk markets is that a leadership vacuum makes a ceasefire more likely than continued escalation, creating a swift flight to risk assets.

Oil and equity futures open later on Sunday, and monitoring their moves may tell whether the optimism holds or whether Sunday’s bounce gets faded the same way Wednesday’s push to $70,000 did.

Iran sits at the center of a region responsible for roughly a third of global crude exports. If markets interpret Khamenei’s death as raising the probability of regime destabilization or disruption to supply routes, energy prices could spike, pressuring global inflation expectations and tightening financial conditions. That would typically weigh on risk assets, including crypto.

Advertisement

However, if traders believe succession mechanisms will stabilize decision-making and avoid broader war, risk assets may continue to find support.

Source link

Continue Reading

Crypto World

Ethereum Smart Accounts Coming in Hegota Fork

Published

on

Ethereum Smart Accounts Coming in Hegota Fork

Ethereum account abstraction, or smart accounts, will be shipped with the Hegota upgrade “within a year,” said Vitalik Buterin on Saturday.

“We have been talking about account abstraction ever since early 2016,” said the Ethereum co-founder over the weekend. 

He added that now, “we finally have EIP-8141, an omnibus that wraps up and solves every remaining problem that AA [account abstraction] was intended to address (plus more),” and it is slated for deployment this year.  

“Finally, after over a decade of research and refinement of these techniques, this all looks possible to make happen within a year (Hegota fork).”

The core concept is “about as simple as you can get while still being highly general purpose,” using “frame transactions,” explained Buterin. 

Advertisement

Instead of a transaction being a single operation, it becomes a sequence of “frames” that can reference each other’s data, and each frame can signal authorization of a sender or gas payer. 

A core principle of cypherpunk Ethereum

Smart accounts with multi-signatures, quantum-resistant wallets, and accounts with changeable keys work by having a validation frame, which checks the signature and approves it, followed by an execution frame. 

Paying gas in non-ETH tokens can be done via a “paymaster contract” or a special-purpose decentralized exchange that provides Ether (ETH) in real time, with no intermediaries required, which is a big deal for Ethereum’s ethos, said Vitalik.  

“Intermediary minimization is a core principle of non-ugly cypherpunk Ethereum: maximize what you can do even if all the world’s infrastructure except the Ethereum chain itself goes down.”

Related: Vitalik Buterin outlines quantum resistance roadmap for Ethereum

Advertisement

Buterin explained that this was also a big deal for privacy protocol users, as it means they can completely remove “public broadcasters” that are the “source of massive UX pain” in privacy platforms such as Railgun and Tornado Cash, and replace them with a “general-purpose public mempool.”

Native account abstraction is expected in the second half of 2026, according to the “Strawmap.” Source: Ethereum Foundation

Quantum-resistant Ethereum in the pipeline

All Ethereum accounts, including existing ones, can be put into the same framework and gain the ability to do batch operations and transaction sponsorship, he said. 

The Ethereum co-founder posted his quantum resistance roadmap for Ethereum on Thursday, stating that the four areas of concern were validator signatures, data storage, user account signatures, and zero-knowledge proofs.

He also said that he expects to see “progressive decreases” of both slot time and finality time in the longer-term scaling roadmap. 

Magazine: 6 massive challenges Bitcoin faces on the road to quantum security

Advertisement