Cryptohack Roundup: Step Finance, CrossCurve Exploits

Also: US Sanctions UK-Registered Exchanges Over Iran Ties Rashmi Ramesh (rashmiramesh_) • February 5, 2026

Every week, Information Security Media Group rounds up cybersecurity incidents in digital assets. This week, Step Finance and CrossCurve hacks, the United States sanctioned U.K.-registered exchanges over Iran ties, forfeiture finalization of funds linked to Helix, Coinbase data breach, 2025's illicit crypto flows and a UK regulator banned Coinbase ads.

See Also: On-Demand | NYDFS MFA Compliance: Real-World Solutions for Financial Institutions

Step Finance said hackers stole about $40 million in digital assets after compromising devices used by company executives, breaching several treasury wallets.

The Solana-based decentralized finance analytics and trading platform detected the incident and notified authorities. It recovered $4.7 million so far. Step Finance paused some operations and advised users not to interact with its STEP token while it investigates and works on a remediation plan.

Cross-chain liquidity protocol ...