Step Finance disclosed a security breach affecting multiple treasury wallets, resulting in the unauthorised movement of more than $27 million worth of Solana onchain.
The Solana-based decentralised finance platform confirmed that the incident occurred during APAC hours and involved a sophisticated attacker exploiting a known attack vector.
“Earlier today several of our treasury wallets were compromised by a sophisticated actor during APAC hours. This was an attack facilitated through a well known attack vector,”
The Step Finance team said.
Step Finance added that remediation steps were taken shortly after the breach was identified, although details of those measures were not disclosed.
Onchain data reviewed by blockchain security firm CertiK showed that approximately 261,854 SOL was unstaked and transferred from wallets controlled by Step Finance.
Based on prevailing market prices, the moved funds were valued at around $27.2 million at the time of the transfers.
Step Finance has not confirmed the final scale of the losses and said investigations into the incident are ongoing.