Step Finance Attacker Liquidates SOL for ETH: Localized Impact or Broader Concern?
A dormant attacker's $21.4 million SOL sale and subsequent ETH purchase raises questions about short-term asset liquidity and market absorption.
Photo by Jonathan Borba on Pexels
Market Impact Snapshot
An attacker's $21.4 million SOL liquidation and subsequent ETH purchase primarily represents a localized capital flow event, exerting short-term pressure on SOL while having a minimal, transient impact on ETH.
Expected 7-day move · by coin
Our conviction: 70/100 — an estimate, not a guarantee.
Our confidence is moderate to high due to the clear attribution of the event to a specific attacker and the observable capital flows. The immediate market reaction on SOL is consistent with a large, one-off sale. Historical precedents for similar illicit fund movements suggest a localized and often transient impact, especially when the broader market is not in a significant downtrend. The impact on ETH is expected to be minimal given its market depth.
Executive summary
On July 5, according to monitoring by Lookonchain, an attacker associated with the Step Finance exploit executed a significant transaction after approximately five months of dormancy. The attacker sold their entire holding of 261,933 SOL, valued at approximately $21.4 million based on prevailing market prices. Following this liquidation, the funds were bridged to the Ethereum network, where the attacker then purchased 12,128 ETH. Subsequently, these ETH holdings were deposited into Tornado Cash, a decentralized mixing service, likely to obscure the transaction trail.
The market's primary concern with this event centers on the immediate capital flows and their potential impact on SOL's short-term price action and liquidity. A $21.4 million sale by a single entity can exert downward pressure, particularly if executed rapidly or during periods of lower trading volume. While the subsequent purchase of ETH represents demand for that asset, the illicit origin and the use of a mixer introduce a known risk vector regarding regulatory scrutiny, though direct market impact from the Tornado Cash aspect is typically limited unless new enforcement actions are announced.
Why it matters
This event has a real economic impact due to the direct capital flows involved, rather than being a mere narrative or branding exercise. The liquidation of 261,933 SOL represents a substantial supply injection into the market from a single source. This likely contributed to short-term selling pressure on SOL, which observed a -2.2% change over the past 24 hours, alongside its trading volume. While Solana's overall market capitalization can absorb such a sale, the timing and execution could have temporarily strained liquidity, especially if order books were thin.
The subsequent purchase of 12,128 ETH, while significant in absolute terms, is comparatively smaller relative to Ethereum's much larger market capitalization and daily trading volume. This inflow of capital into ETH could have provided a minor, transient demand boost, but its overall market impact is likely diluted. The use of Tornado Cash for obfuscation is a standard practice for illicit funds and, while a persistent concern for regulators, does not typically trigger immediate, broad market reactions unless it leads to direct enforcement actions against major market participants or the protocol itself. The primary beneficiary of these actions is the attacker, who successfully liquidated assets and attempted to anonymize the proceeds. For legitimate market participants, the event serves as a reminder of the ongoing presence of illicit activity and the potential for large, one-off liquidations to affect specific asset prices.
What it means for you
The likely scenarios — and the practical takeaway.
A bullish interpretation suggests that the market has already absorbed the $21.4 million SOL sale, as evidenced by SOL's 7-day performance of +13.4% despite the recent 24h dip. The liquidation by a known attacker is a one-off event, not indicative of broader institutional selling or fundamental weakness in the Solana ecosystem. Furthermore, the subsequent purchase of 12,128 ETH, even from illicit sources, demonstrates underlying demand for Ethereum, potentially providing a minor upward impulse for ETH, which is currently up +0.3% over 24 hours and +12.3% over 7 days. If broader market sentiment remains strong, the impact of this isolated event on SOL could be quickly overcome, with trading volume supporting price recovery.
The most likely scenario is a localized and short-term impact on SOL, with a largely neutral effect on ETH and the broader market. The $21.4 million SOL sale, while significant, represents approximately 0.25% of Solana's current market capitalization, suggesting the market has capacity to absorb such a transaction, especially if executed over time. The observed 24-hour -2.2% price decline for SOL, accompanied by its trading volume, likely reflects the immediate impact of this selling pressure. However, given SOL's strong +13.4% performance over the past 7 days, the market appears to be discounting this as an isolated event from a specific bad actor rather than a systemic issue. The subsequent purchase of 12,128 ETH, while adding demand, is relatively small compared to Ethereum's daily trading volume and market cap, making its price impact negligible. The use of Tornado Cash, while a regulatory concern, is a known aspect of illicit fund movements and is unlikely to trigger immediate, broad market-wide selling unless new, specific regulatory actions targeting major exchanges or protocols are announced. This view would be invalidated if SOL experiences a sustained decline below its recent support levels on significantly elevated selling volume, or if unexpected regulatory actions directly targeting ETH or major exchanges materialize due to the Tornado Cash usage.
From a bearish perspective, the $21.4 million SOL liquidation represents a substantial supply shock from a single entity, which could trigger further selling if market participants perceive increased risk or if liquidity remains thin. Despite the 7-day positive performance for SOL, the 24-hour -2.2% decline indicates immediate pressure. The use of Tornado Cash, while common for illicit funds, could also draw renewed regulatory scrutiny on privacy protocols and potentially on exchanges that interact with them, creating a broader risk-off sentiment for DeFi assets, including ETH. Sustained high SOL selling volume could indicate lingering pressure.
Your takeaway
Monitor SOL's short-term price action and trading volume for signs of continued selling pressure or a quick recovery, while observing ETH for any unexpected shifts in demand or regulatory news.
Probabilities are our editorial estimates, not financial advice. How we build these scenarios.
What would change our view?
Real analysis is falsifiable — these are the measurable signals that would move our scenario, in either direction.
Shifts us Bullish
- SOL daily trading volume increases by >20% while price recovers above $82.00
- No new regulatory statements regarding mixers or illicit funds within 7 days
Shifts us Bearish
- SOL price closes below $78.00 for two consecutive days with elevated selling volume
- Major exchanges announce new restrictions on assets linked to mixing services
- Significant increase in SOL exchange inflows (>100,000 SOL in 24h)
Tick off what you've already checked — saved on this device.
Key levels to watch
Bigger picture · structural
The boundaries that tend to hold over days and weeks.
- Resistance
- $82.00
- Support
- $78.00
A ceiling — a level near the price prior to the reported sale, where SOL may face resistance if it attempts to recover quickly.
Our analysis sees this as a floor — the price would need to break below it with significant volume for the outlook to turn negative.
Short-term · next 24 hoursINTRADAY
Our single most-likely call for today — one direction, not a list of options.
→Most likely: chops sidewaysConfidence: Medium
~$80.00
Our analysis leans toward SOL price stabilizing after the initial selling pressure, with trading volume indicating absorption rather than continued decline.
Would flip if price breaks below $78.00 on sustained high volume
24 hours
neutral
Immediate selling pressure from the liquidation is likely absorbed, leading to stabilization.
7 days
neutral
The market will likely discount this as an isolated event, allowing SOL to trade alongside broader market sentiment.
30 days
neutral
Longer-term impact is minimal as the event is a one-off capital flow rather than a fundamental shift.
90 days
neutral
No lasting impact expected on SOL or ETH fundamentals from this specific event.
What could invalidate this read — known unknowns, not predictions.
- Unforeseen regulatory action against Tornado Cash or related entities, impacting broader DeFi sentiment.
- A broader market downturn coinciding with the event, amplifying selling pressure on SOL.
- Further large liquidations from other attacker-linked wallets, increasing supply pressure.
- Lower-than-expected liquidity in SOL order books, leading to greater price volatility.
Bottom line
The most likely outcome is a contained, short-term impact on SOL's price due to the $21.4 million liquidation, with a 60% probability. This event is largely seen as an isolated action by a known bad actor, rather than a broader market indicator. The primary risk to this assessment would be a cascading effect if other large SOL holders react negatively, or if the use of Tornado Cash triggers unforeseen regulatory actions. Investors should monitor SOL's trading volume and price stability around its current levels for signs of recovery or sustained weakness.
Matched to the highest-ranked CoinGecko listing — always double-check the contract address before trading; impostor tokens reuse real names.
For information and analysis only — not financial advice. We are an analysis platform, not a broker, financial adviser, or seller of any asset, and we never tell you to buy or sell. Our scenario probabilities are editorial estimates developed through a combination of data analysis, automated research tools, source verification, and human editorial oversight. They may be incorrect and are not investment recommendations. Crypto is high-risk and you can lose everything — always conduct your own research before making financial decisions.
More analysis
Related analysis
Circle's new trust bank: A regulatory win or limited market impact?
Circle has secured final OCC approval to establish Circle National Trust, a federally supervised trust bank focused on digital-asset custody. While a strategic step for Circle's long-term infrastructure, the bank cannot take ordinary deposits or make loans, limiting its immediate market impact on USDC demand or broader crypto capital flows.
Circle's OCC Trust Bank Approval: A Catalyst for Institutional USDC Flows or Priced-In Regulatory Progress?
Circle has secured final OCC approval for Circle National Trust, enabling federally supervised digital asset custody and a path for USDC reserve management. This strengthens regulatory alignment for the stablecoin issuer, potentially facilitating future institutional capital flows into the digital asset ecosystem, although immediate market-wide price action appears limited.
Bitcoin ETF Flows Turn Positive: Structural Shift or Temporary Relief?
Bitcoin ETF flows have turned positive for the first time in eight weeks, coinciding with a 1.24% rise in total market capitalization. We evaluate whether this signals a sustainable trend or a transient liquidity event.