Incident All ledgers
Step Finance: $40.0m
Step Finance lost $40.0m on 31 January 2026. Ranked 85th of 1,272 crypto failures, with method, returned funds and comparable incidents.
- Date
- 31 January 2026
- Lost
- $40.0m
- Returned or repaid
- None recorded
- Target
- DeFi Protocol
- Category
- Key Compromise
- Method
- Private Key Compromised
- Chains
- Solana
On January 31, 2026, Step Finance lost about $40 million after attackers compromised executive team devices and gained access to treasury and fee wallet signing keys. No smart contract vulnerability was involved.
Against the ledger
- It ranks 85th of the 1,272 incidents with a known loss, and 11th in 2026.
- It accounts for 38.4% of the $104.1m in known losses in January 2026.
- 153 incidents in the ledger are classified as Key Compromise, for $8.96bn in total. This one is 0.4% of that.
- The ledger records no returned funds.
Closest in size by the same method
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 14 Aug 2025 | BtcTurk | $48.0m | CEX | Hot Wallet Key Compromised | — |
| 19 Jul 2025 | CoinDCX | $44.2m | CEX | Hot Wallet Key Compromised | — |
| 20 Sept 2024 | BingX | $43.3m | CEX | Hot Wallet Key Compromised | — |
| 04 Sept 2023 | Stake.com | $41.3m | Other | Hot Wallet Key Compromised | — |
| 07 May 2019 | Binance | $40.0m | CEX | Hot Wallet Key Compromised | — |
All failures in 2026 · The failures ledger
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “Step Finance, failures ledger”, data to 2 November 2026, https://bitminer.io/ledger/incident/step-finance-2026-01-31/. How this is built