Step Finance: $40 Million hack, please avoid using STEP token during investigation

On February 3, Step Finance released a statement addressing a hacker attack: Approximately $40 million in assets were stolen from its treasury following a breach of a company executive’s device. Upon discovering the security vulnerability, Step Finance immediately launched an investigation with cybersecurity researchers and relevant authorities, notified law enforcement, and temporarily paused some operations. The announcement noted the project has so far recovered around $3.7 million in Remora-related assets and roughly $1 million in other positions. As the largest liquidity provider (LP) for Remora Markets, related LP activities will resume once the system is confirmed fully secure. Step Finance emphasized Remora Markets is unrelated to the incident, and all rTokens remain 1:1 backed by custodied collateral. Pending the investigation’s completion, the project advises users to temporarily refrain from using the STEP token. The team stated it will take measures based on a pre-exploit system snapshot to protect STEP token holders, and will promptly release updates as developments unfold.