Step FinanceMicro-cap
High risk — a $30M treasury theft via device compromise, 90% token crash, and uncertain protocol viability make this one of the most damaged protocols in Solana DeFi
Top Risks
1
Treasury wallets hacked in January 2026: 261,854 SOL ($30M) stolen via executive device compromise, STEP token crashed 90%
2
Operational security failure: the attack exploited device-level access to treasury keys, bypassing all smart contract security
3
Protocol viability in question: lost treasury funding for development, operations, and subsidiary projects
Risk Breakdown
Frequently Asked Questions
Is Step Finance safe to use?
Step Finance receives a C+ risk grade (41/100) from Hindenrank, where lower scores indicate lower risk. High risk — a $30M treasury theft via device compromise, 90% token crash, and uncertain protocol viability make this one of the most damaged protocols in Solana DeFi A Solana portfolio dashboard and swap tool that was hacked in January 2026. An executive's personal device was compromised, and attackers stole 261,854 SOL ($30M) from the treasury. The STEP token crashed 90%. Its C- grade reflects the devastating security breach and uncertain future without treasury funding.
What are the main risks of using Step Finance?
The key risks identified for Step Finance are: (1) Hackers stole $30M by compromising an executive's device, not by breaking the smart contracts. The treasury that funded development, operations, and growth is gone (2) The STEP token lost 90% of its value after the hack. If you staked STEP to earn fees via xSTEP, those fees are now nearly worthless (3) The full scope of the device compromise is unclear. If the attacker also got admin keys for the swap tool, they could potentially manipulate trade routing to steal from users swapping through Step
What is Step Finance's risk score breakdown?
Step Finance scores 41/100 across eight risk dimensions: Mechanism Novelty: 2/15, Interaction Severity: 11/20, Oracle Surface: 0/10, Documentation Gaps: 5/10, Track Record: 15/15, Scale Exposure: 0/10, Regulatory Risk: 2/10, Vitality Risk: 6/10. The highest risk area is Track Record at 15/15.
How does Step Finance compare to other DeFi protocols?
Among 68 rated DeFi protocols on Hindenrank, Step Finance ranks #54 by safety (lowest risk score = safest). Its 41/100 risk score and C+ grade place it among the riskier DeFi protocols.
Has Step Finance ever been hacked or exploited?
Step Finance scores 15/15 on the Track Record risk dimension, indicating some history of security incidents or exploits. Higher scores reflect more severe or frequent incidents. Review the full risk report for details.
Incident History
1incident|$40Mtotal losses
Last scanned 2026-02-12