Step Finance said on Feb. 3 that approximately $40 million was taken from its treasury after an executive's device was compromised. The company has engaged cybersecurity researchers and law enforcement, temporarily suspending some operations while the investigation proceeds. Step Finance said roughly $3.7 million in Remora-related assets and about $1 million from other positions have been recovered so far. The company advised users not to use the STEP token pending completion of the probe, adding it will take measures based on a pre-exploit system snapshot to safeguard STEP holders and provide updates as the investigation progresses.