Step Finance: Hack resulted in approximately $40 million being stolen; STEP tokens are advised to be avoided during the investigation.

Step Finance issued a statement on its X platform regarding a hacking incident, stating that approximately $40 million in assets were stolen from the vault of a company executive after their device was compromised. Step Finance stated that upon discovering the security vulnerability, it immediately launched an investigation with cybersecurity researchers and relevant departments, notified law enforcement agencies, and temporarily suspended some operational activities. The announcement indicated that approximately $3.7 million in Remora-related assets and approximately $1 million in other positions have been recovered. As the largest liquidity provider for Remora Markets, related LP activities will resume once the system is confirmed to be fully secure. Step Finance emphasized that Remora Markets is not involved in this security incident, and all rTokens remain backed by custodial collateral at a 1:1 ratio. Until the investigation is complete, Step Finance advises users to refrain from using STEP tokens. The project team stated that it will take measures based on the system snapshot prior to the vulnerability exploitation to ensure the security of STEP token holders and will release updates as further progress becomes available.