Step Finance loses $40 million in executive device hack

As detailed in Bleeping Computer, Step Finance, a prominent decentralized finance (DeFi) platform on the Solana blockchain, announced a significant security breach resulting in the loss of approximately $40 million worth of digital assets. The incident, detected on January 31, involved the compromise of devices belonging to the company's executive team, leading to unauthorized access to several treasury wallets.

The attackers exploited a "well-known attack vector" to gain access to the wallets. While initial estimates from blockchain analytics firm CertiK placed the loss at around $28.9 million (261,854 SOL), Step Finance's internal investigation confirmed the total loss to be approximately $40 million. The platform has managed to recover about $3.7 million in Remora assets and $1 million in other positions through coordination with partners and Token22 protections. Some operations have been temporarily halted to reinforce security measures. Step Finance has not disclosed specific details about the attack or the perpetrators.

This incident highlights the persistent security challenges within the DeFi space, where the loss of $40 million in a single event contributes to the substantial figures seen in crypto-theft attacks. In January alone, over $398 million was lost across the industry.

Source: Bleeping Computer