Step Finance — Cyber Attacks, Breaches & Threat Activity

Threat entity extracted from intelligence sources

Frequency
20
occurrences
First Seen
January 31, 2026
Last Seen
July 5, 2026

Step Finance is a organization tracked across 11 threat clusters and 20 intelligence report mentions on ThreatCluster. First observed January 31, 2026; most recent activity July 5, 2026.

Related Threat Clusters

  • AI Agents Render All DeFi Protocols Unsafe, Warns Security Expert

    Manuel Aráoz, CEO of OpenZeppelin, has declared that all decentralized finance (DeFi) protocols are currently unsafe due to the enhanced capabilities of AI agents in identifying vulnerabilities. His warning follows a…

    9 articles · Updated May 27, 2026
  • Step Finance Crypto Heist: $40M Lost, Recovery Efforts Complicated

    On January 31, 2026, Step Finance, a DeFi platform on Solana, was hacked, resulting in the theft of approximately 261,854 SOL tokens valued between $27 million and $30 million. The attack exploited vulnerabilities in…

    2 articles · Updated July 5, 2026
  • Figure Technology Confirms Data Breach from Social Engineering Attack

    Figure Technology, a blockchain-based lending company, confirmed a data breach resulting from a social engineering attack on an employee. The breach allowed attackers to steal a limited number of files, and the company…

    33 articles · Updated February 13, 2026
  • Step Finance Suffers $40M Hack via Compromised Executive Devices

    Step Finance experienced a significant security breach resulting in a loss of approximately $40 million in digital assets. The incident, detected on January 31, 2025, was attributed to compromised devices belonging to…

    15 articles · Updated February 3, 2026
  • Crypto Platform Hack Amid Market Decline Affects Step Finance

    Step Finance, a crypto platform that aggregates liquidity pool tokens, was hacked as the cryptocurrency market experienced a significant downturn, with Bitcoin dropping below $80K. The hack occurred shortly after the…

    2 articles · Updated February 1, 2026
  • CrossCurve Secures $EYWA After Exploit Containment

    CrossCurve, a cross-chain liquidity protocol, reported a successful containment of an exploit involving the $EYWA token on February 2, 2026. Hackers extracted $EYWA from a bridge on the Ethereum network, but the tokens…

    8 articles · Updated February 2, 2026
  • Cybersecurity Breach: Average Breakout Time Reduced to 29 Minutes

    According to CrowdStrike's annual global threat report, the average breakout time from initial network intrusion to other systems has decreased to 29 minutes in 2025, significantly faster than previous years. The report…

    2 articles · Updated February 25, 2026
  • Three Solana Platforms Shut Down After Step Finance Hack

    Three platforms based on the Solana blockchain are shutting down following a hack of Step Finance that occurred at the end of January. The total losses from the hack are reported to be between $27 million and $40…

    2 articles · Updated February 24, 2026
  • Over $400M Lost in Crypto Hacks and Phishing Attacks

    Over $400 million has been lost in the crypto industry due to phishing scams and security breaches. Vitalik Buterin, co-founder of Ethereum, has proposed strategies to enhance security by integrating AI and…

    1 article · Updated February 23, 2026
  • Tether Freezes $4.2 Billion in USDT Due to Illicit Activities

    Tether has frozen approximately $4.2 billion in USDT linked to illicit activities, with around $3.5 billion frozen since 2023. This action follows a recent freeze of over $500 million related to an illegal gambling and…

    2 articles · Updated March 2, 2026

Recent Intelligence Reports

  • Step Finance Crypto Heist: Key Takeaways on Security and Recoveries — Valuethemarkets · July 5, 2026
  • Step Finance exploiter sells $21M in SOL, buys ETH and launders funds through Tornado Cash — Cryptobriefing · July 5, 2026
  • OpenZeppelin CEO Warns AI Agents Pose New Threat to DeFi Security — Kucoin · May 27, 2026
  • Tether freezes USD 4.2 bln in USDT over illicit use — Thepaypers · March 2, 2026
  • Hacked in 30 minutes, Claude distillation, DeFi shutdown after attack — Linkedin · February 25, 2026
  • 3 Solana platforms to shutter following devastating $40M hack — Tradingview · February 24, 2026
  • 3 Solana platforms to shutter following devastating $27M hack — Tradingview · February 24, 2026
  • Buterin says AI and human intent can make crypto safer amid $400M theft — Cryptorank · February 23, 2026

CVSS v3.1 Breakdown