The attack sent Step Finance's native STEP token plummeting more than 60% as the protocol enlists security firms to investigate the incident.