Coinbase Global Inc.: 10-K Risk Factor Changes

We rely on financial institutions and other payment processors to process customers’ payments in connection with the purchase of crypto assets on our platform and we pay these providers fees for their services. From time to time, payment networks have increased, and may increase in the future, the interchange fees and assessments that they charge for transactions that use their networks. Payment networks have imposed, and may impose in the future, special fees on the purchase of crypto assets, including on our platform, which could negatively impact us and significantly increase our costs. Our payment card processors may have the right to pass any increases in interchange fees and assessments on to us, and may impose additional use charges which would increase our operating costs and reduce our operating income. We could attempt to pass these increases along to our customers, but this strategy might result in the loss of customers to our competitors that may not pass along the increases, thereby reducing our revenue and earnings. If competitive practices prevent us from passing along the higher fees to our customers in the future, we may have to absorb all or a portion of such increases, thereby increasing our operating costs and reducing our earnings. 68 68 68 68 68 68 Table of Contents Table of Contents Table of Contents We may also be directly or indirectly liable to the payment networks for rule violations. Payment networks set and interpret their network operating rules and have alleged from time to time that various aspects of our business model violate these operating rules. If such allegations are not resolved favorably, they may result in significant fines and penalties, require changes in our business practices, or result in the loss of their services for parts of our business, any of which may be costly and adversely affect our business. The payment networks could adopt new operating rules or interpret or reinterpret existing rules that we or our processors might find difficult or even impossible to follow, or costly to implement. As a result, we could lose our ability to give customers the option of using cards to fund their purchases or the choice of currency in which they would like their card to be charged. If we are unable to accept cards or are limited in our ability to do so, our business, operating results, and financial condition could be adversely affected.

We rely on banks and other payment processors to process customers’ payments in connection with the purchase of crypto assets on our platform and we pay these providers fees for their services. From time to time, payment networks have increased, and may increase in the future, the interchange fees and assessments that they charge for transactions that use their networks. Payment networks have imposed, and may impose in the future, special fees on the purchase of crypto assets, including on our platform, which could negatively impact us and significantly increase our costs. Our payment card processors may have the right to pass any increases in interchange fees and assessments on to us, and may impose additional use charges which would increase our operating costs and reduce our operating income. We could attempt to pass these increases along to our customers, but this strategy might result in the loss of customers to our competitors that may not pass along the increases, thereby reducing our revenue and earnings. If competitive practices prevent us from passing along the higher fees to our customers in the future, we may have to absorb all or a portion of such increases, thereby increasing our operating costs and reducing our earnings. We may also be directly or indirectly liable to the payment networks for rule violations. Payment networks set and interpret their network operating rules and have alleged from time to time that various aspects of our business model violate these operating rules. If such allegations are not resolved favorably, they may result in significant fines and penalties or require changes in our business practices that may be costly and adversely affect our business. The payment networks could adopt new operating rules or interpret or reinterpret existing rules that we or our processors might find difficult or even impossible to follow, or costly to implement. As a result, we could lose our ability to give customers the option of using cards to fund their purchases or the choice of currency in which they would like their card 70 70 70 70 70 70 Table of Contents Table of Contents Table of Contents to be charged. If we are unable to accept cards or are limited in our ability to do so, our business, operating results, and financial condition could be adversely affected.

We have a substantial amount of indebtedness and other obligations. As of December 31, 2025, we had approximately $7.28 billion in aggregate principal amount of outstanding long-term indebtedness (excluding crypto asset borrowings), which includes $1.74 billion of our Senior Notes, $1.27 billion of our 2026 Convertible Notes, $1.50 billion of our 2029 Convertible Notes, $1.27 billion of our 2030 Convertible Notes, and $1.50 billion of our 2032 Convertible Notes. Our substantial indebtedness and other obligations may: •make it difficult for us to satisfy our financial obligations, including making scheduled principal and interest payments on our 2026 Convertible Notes, 2029 Convertible Notes, 2030 Convertible Notes, 2032, Convertible Notes, Senior Notes, and our other obligations; •limit our ability to use our cash flow for working capital, capital expenditures, acquisitions, or other general business purposes; •increase our cost of borrowing; •require us to use a substantial portion of our cash flow from operations to make debt service payments and pay our other obligations when due; •limit our flexibility to plan for, or react to, changes in our business and industry; •place us at a competitive disadvantage compared to our less leveraged competitors; and •increase our vulnerability to the impact of adverse economic and industry conditions, including changes in interest rates and foreign exchange rates.

We have a substantial amount of indebtedness and other obligations. As of December 31, 2024, we had approximately $4.28 billion in aggregate principal amount of outstanding long-term indebtedness (excluding crypto asset borrowings), which includes $1.74 billion of our Senior Notes, $1.27 billion of our 2026 Convertible Notes, and $1.27 billion of our 2030 Convertible Notes. Our substantial indebtedness and other obligations may: •make it difficult for us to satisfy our financial obligations, including making scheduled principal and interest payments on our 2026 Convertible Notes, 2030 Convertible Notes, Senior Notes, and our other obligations; •limit our ability to use our cash flow for working capital, capital expenditures, acquisitions, or other general business purposes; •increase our cost of borrowing; •require us to use a substantial portion of our cash flow from operations to make debt service payments and pay our other obligations when due; •limit our flexibility to plan for, or react to, changes in our business and industry; •place us at a competitive disadvantage compared to our less leveraged competitors; and •increase our vulnerability to the impact of adverse economic and industry conditions, including changes in interest rates and foreign exchange rates.

As part of our business strategy, we routinely conduct discussions and evaluate opportunities for possible acquisitions, strategic investments, entries into new businesses, joint ventures, and other transactions. We have made, and may continue to make, acquisitions of and investments in, among other 51 51 51 51 51 51 Table of Contents Table of Contents Table of Contents things, specialized employees and complementary companies, products, services, licenses, or technologies. For example, as a result of our acquisition of Deribit in August 2025, we now provide additional cryptocurrency products and services internationally, including options and perpetual swaps. If we are unable to successfully integrate Deribit or comply with evolving U.S. and international crypto and derivatives regulations applicable to our expanded operations and products, we could be required to modify or discontinue certain offerings, face limitations on our ability to onboard or serve customers in key markets, incur substantial compliance and remediation costs, or be subject to penalties and other enforcement actions, any of which could adversely affect our business, operating results, and financial condition. In the future, the pace and scale of our acquisitions may increase and may include larger acquisitions than we have done historically. We also invest in companies and technologies, many of which are private companies and technologies that are highly speculative in nature. In the future, we may not be able to find other suitable acquisition and investment candidates, and we may not be able to complete acquisitions or make investments on favorable terms, if at all. In some cases, the costs of such acquisitions and investments may be substantial, and there is no assurance that we will receive a favorable return on investment for our acquisitions and investments. We have and may in the future be required to write off acquisitions or investments. Moreover, our previous and future acquisitions and investments may not achieve our goals, and any future acquisitions and investments we complete could be viewed negatively by customers, developers, advertisers, or investors. In addition, if we fail to successfully close or integrate any acquisitions, or integrate the products or technologies associated with such acquisitions into our company, our business, operating results, and financial condition could be adversely affected. Our ability to acquire and integrate companies, products, services, licenses, employees, or technologies in a successful manner is unproven. Any integration process may require significant time and resources, and we may not be able to manage the process successfully, including successfully securing regulatory approvals which may be required to close the transaction and to continue to operate the target firm’s business or products in a manner that is useful to us. We may not successfully evaluate or utilize the acquired products, services, technology, or personnel, or accurately forecast the financial impact of an acquisition transaction, including accounting charges. We may have to pay cash, incur debt, or issue equity securities to pay for any such acquisition, which could adversely affect our business, operating results, and financial condition. The sale of equity or issuance of debt to finance any such acquisitions could result in dilution to our shareholders, which, depending on the size of the acquisition, may be significant. The incurrence of indebtedness would result in increased fixed obligations and could also include covenants or other restrictions that would impede our ability to manage our operations.

As part of our business strategy, we routinely conduct discussions and evaluate opportunities for possible acquisitions, strategic investments, entries into new businesses, joint ventures, and other transactions. We have made, and may continue to make, acquisitions of and investments in, among other things, specialized employees and complementary companies, products, services, licenses, or technologies. In the future, the pace and scale of our acquisitions may increase and may include larger acquisitions than we have done historically. We also invest in companies and technologies, many of which are private companies and technologies that are highly speculative in nature. In the future, we may not be able to find other suitable acquisition and investment candidates, and we may not be able to complete acquisitions or make investments on favorable terms, if at all. In some cases, the costs of such acquisitions and investments may be substantial, and there is no assurance that we will receive a favorable return on investment for our acquisitions and investments. We have and may in the future be required to write off acquisitions or investments. Moreover, our previous and future acquisitions and investments may not achieve our goals, and any future acquisitions and investments we complete could be viewed negatively by customers, developers, advertisers, or investors. In addition, if we fail to successfully close or integrate any acquisitions, or integrate the products or technologies associated with such acquisitions into our company, our business, operating results, and financial condition could be adversely affected. Our ability to acquire and integrate companies, products, services, licenses, employees, or technologies in a successful manner is unproven. Any integration process may require significant time and resources, and we may not be able to manage the process successfully, including successfully securing regulatory approvals which may be required to close the transaction and to continue to operate the target firm’s business or products in a manner that is useful to us. We may not successfully evaluate or utilize the acquired products, services, technology, or personnel, or accurately forecast the financial impact of an acquisition transaction, including accounting charges. We may have to pay cash, incur debt, or issue equity securities to pay for any such acquisition, which could adversely affect our business, operating results, and financial condition. The sale of equity or issuance of debt to finance any such acquisitions could result in dilution to our stockholders, which, depending on the size of the acquisition, may be significant. The incurrence of indebtedness would result in increased fixed obligations and could also include covenants or other restrictions that would impede our ability to manage our operations.

Our products, services and educational offerings incorporate a holistic, customer-centric set of digital engagement practices, including educational content and notifications, which are designed, in part, to promote financial literacy and awareness and to provide customers with guidance and information to help them make better informed decisions about their crypto activity. Certain jurisdictions have proposed or are considering laws and regulations regarding conflicts of interest associated with the use of predictive data analytics, digital engagement practices, and similar technologies by broker-dealers, investment advisers and/or other securities market participants. If adopted and found to apply to our business, such laws or regulations may impose obligations on us that may require us to modify, limit, or discontinue our use of certain technologies and features used in connection with our products and services and/or to change the way that we interact with existing and prospective customers, which could adversely affect our business, operating results, and financial condition.

Our products, services and educational offerings incorporate a holistic, customer-centric set of digital engagement practices, including educational content and notifications, which are designed, in part, to promote financial literacy and awareness and to provide customers with guidance and information to help them make better informed decisions about their crypto activity. Certain jurisdictions have proposed or are considering laws and regulations regarding conflicts of interest associated with the use of predictive data analytics, digital engagement practices, and similar technologies by broker-dealers, investment advisers and/or other securities market participants. For example, in July 2023 the SEC proposed rules (the “July 2023 Rule Proposals”) that would impose new obligations on broker-dealers and investment advisers registered, or required to be registered, with the SEC with respect to conflicts of interest associated with the use of predictive data analytics and similar technologies when interacting with investors. We do not believe that the July 2023 Rule Proposals, if adopted as proposed, would apply to our business, although the SEC has alleged in the June 2023 SEC Complaint that we have acted as an unregistered broker. If the July 2023 Rule Proposals were to be adopted (as proposed or otherwise) and found to apply to our business, or if similar rules were to be adopted and found to apply to our business in any other jurisdiction in which we operate, we may be required to modify, limit, or discontinue our use of certain technologies and features used in connection with our products and services and/or to change the way that we interact with existing and prospective customers. The adoption of such laws or regulations in the jurisdictions in which we operate could, if they are deemed to apply to our business, adversely affect our business, operating results, and financial condition.

Our brand and reputation are key assets and a competitive advantage. Maintaining, protecting, and enhancing our brand depends largely on the success of our marketing efforts, ability to provide consistent, high-quality, and secure products, services, features, and support, and our ability to successfully secure, maintain, and defend our rights to use the “Coinbase” mark and other trademarks important to our brand. We believe that the importance of our brand will increase as competition further intensifies. Our brand and reputation could be harmed if we fail to achieve these objectives or if our public image were to be tarnished by negative publicity, unexpected events, or actions by third parties. Unfavorable publicity regarding, for example, our product changes, product quality, litigation or regulatory activity, privacy and data security practices, terms of service, employment matters, the use of our products, services, or supported crypto assets for illicit or objectionable ends, the actions of our customers, or the actions of other companies that provide similar services to ours, has in the past, and could in the future, adversely affect our reputation. Moreover, to the extent that we acquire a company and maintain that acquired company’s separate brand, we could experience brand dilution or fail to retain positive impressions of our own brand to the extent such impressions are instead attributed to the acquired company’s brand. In addition, because we are a founder-led company, actions by, or 52 52 52 52 52 52 Table of Contents Table of Contents Table of Contents unfavorable publicity about, Brian Armstrong, our co-founder and Chief Executive Officer, may adversely impact our brand and reputation. Such negative publicity also could have an adverse effect on the size and engagement of our customers and could result in decreased revenue, which could adversely affect our business, operating results, and financial condition.

Our brand and reputation are key assets and a competitive advantage. Maintaining, protecting, and enhancing our brand depends largely on the success of our marketing efforts, ability to provide consistent, high-quality, and secure products, services, features, and support, and our ability to successfully secure, maintain, and defend our rights to use the “Coinbase” mark and other trademarks important to our brand. We believe that the importance of our brand will increase as competition further intensifies. Our brand and reputation could be harmed if we fail to achieve these objectives or if our public image were to be tarnished by negative publicity, unexpected events, or actions by third parties. Unfavorable publicity regarding, for example, our product changes, product quality, litigation or regulatory activity, privacy and data security practices, terms of service, employment matters, the use of our products, services, or supported crypto assets for illicit or objectionable ends, the actions of our customers, or the actions of other companies that provide similar services to ours, has in the past, and could in the future, adversely affect our reputation. Moreover, to the extent that we acquire a company and maintain that acquired company’s separate brand, we could experience brand dilution or fail to retain positive impressions of our own brand to the extent such impressions are instead attributed to the acquired company’s brand. In addition, because we are a founder-led company, actions by, or unfavorable publicity about, Brian Armstrong, our co-founder and Chief Executive Officer, may adversely impact our brand and reputation. Such negative publicity also could have an adverse effect on the size 54 54 54 54 54 54 Table of Contents Table of Contents Table of Contents and engagement of our customers and could result in decreased revenue, which could adversely affect our business, operating results, and financial condition.

Our ability to make payments on our indebtedness, including the 2026 Convertible Notes, 2029 Convertible Notes, 2030 Convertible Notes, 2032 Convertible Notes, and Senior Notes, and our other obligations will depend on our financial and operating performance, which is subject to prevailing economic and competitive conditions and to certain financial, business and other factors beyond our control. We may be unable to attain a level of cash flows from operating activities sufficient to permit us to pay the principal, premium, if any, and interest on our indebtedness, including each series of the 2026 Convertible Notes, 2029 Convertible Notes, 2030 Convertible Notes, 2032 Convertible Notes, and Senior Notes, and other obligations. If we are unable to service our debt and other obligations from cash flows, we may need to refinance or restructure all or a portion of our debt obligations prior to maturity. Our ability to refinance or restructure our debt and other obligations will depend upon the condition of the capital markets and our financial condition at such time. Any refinancing or restructuring could be at higher interest rates and may require us to comply with more onerous covenants, which could further restrict our business operations. Statutory, contractual or other restrictions may also limit our subsidiaries’ ability to pay dividends or make distributions, loans or advances to us. For these reasons, we may not have access to any assets or cash flows of our subsidiaries to make interest and principal payments on each series of the 2026 Convertible Notes, 2029 Convertible Notes, 2030 Convertible Notes, 2032 Convertible Notes, and Senior Notes. If our cash flows are insufficient to fund our debt and other obligations and we are unable to refinance or restructure these obligations on commercially reasonable terms or at all, we could face substantial liquidity problems and may be forced to reduce or delay investments and capital expenditures, or to sell material assets or operations to meet our debt and other obligations. We cannot assure you that we would be able to implement any of these alternative measures on satisfactory terms or at all or that the proceeds from such alternatives would be adequate to meet any debt or other obligations when due. If it becomes necessary to implement any of these alternative measures, our business, operating results, and financial condition could be adversely affected. 49 49 49 49 49 49 Table of Contents Table of Contents Table of Contents

Our ability to make payments on our indebtedness, including the 2026 Convertible Notes, 2030 Convertible Notes, and Senior Notes, and our other obligations will depend on our financial and operating performance, which is subject to prevailing economic and competitive conditions and to certain financial, business and other factors beyond our control. We may be unable to attain a level of cash flows from operating activities sufficient to permit us to pay the principal, premium, if any, and interest on our indebtedness, including each series of the 2026 Convertible Notes, 2030 Convertible Notes, and Senior Notes, and other obligations. If we are unable to service our debt and other obligations from cash flows, we may need to refinance or restructure all or a portion of our debt obligations prior to maturity. Our ability to refinance or restructure our debt and other obligations will depend upon the condition of the capital markets and our financial condition at such time. Any refinancing or restructuring could be at higher interest rates and may require us to comply with more onerous covenants, which could further restrict our business operations. Statutory, contractual or other restrictions may also limit our subsidiaries’ ability to pay dividends or make distributions, loans or advances to us. For these reasons, we may not have access to any assets or cash flows of our subsidiaries to make interest and principal payments on each series of the 2026 Convertible Notes, 2030 Convertible Notes, and Senior Notes. If our cash flows are insufficient to fund our debt and other obligations and we are unable to refinance or restructure these obligations on commercially reasonable terms or at all, we could face substantial liquidity problems and may be forced to reduce or delay investments and capital expenditures, or to sell 51 51 51 51 51 51 Table of Contents Table of Contents Table of Contents material assets or operations to meet our debt and other obligations. We cannot assure you that we would be able to implement any of these alternative measures on satisfactory terms or at all or that the proceeds from such alternatives would be adequate to meet any debt or other obligations when due. If it becomes necessary to implement any of these alternative measures, our business, operating results, and financial condition could be adversely affected.

We charge blockchain transaction fees when a customer sends certain crypto assets from their Coinbase account to a non-Coinbase account. We estimate the blockchain transaction fee based on the cost that we will incur to process the withdrawal transaction on the underlying blockchain network. In addition, we also pay blockchain transaction fees when we move crypto assets for various operational purposes, such as when we transfer crypto assets between our hot and cold wallets, for which we do not charge our customers. However, blockchain transaction fees have been and may continue to be unpredictable. If the block rewards for miners on any blockchain network are not sufficiently high to incentivize miners, miners may demand higher transaction fees, or collude to reject low transaction fees 59 59 59 59 59 59 Table of Contents Table of Contents Table of Contents and force users to pay higher fees. Although we generally attempt to pass blockchain transaction fees relating to customer withdrawals through to our customers, we have in the past incurred, and expect to incur from time to time, losses associated with the payment of blockchain transaction fees in excess of what we charge our customers, which could adversely affect our business, operating results, and financial condition.

We charge blockchain transaction fees when a customer sends certain crypto assets from their Coinbase account to a non-Coinbase account. We estimate the blockchain transaction fee based on the cost that we will incur to process the withdrawal transaction on the underlying blockchain network. In addition, we also pay blockchain transaction fees when we move crypto assets for various operational purposes, such as when we transfer crypto assets between our hot and cold wallets, for which we do not charge our customers. However, blockchain transaction fees have been and may continue to be unpredictable. If the block rewards for miners on any blockchain network are not sufficiently high to incentivize miners, miners may demand higher transaction fees, or collude to reject low transaction fees 61 61 61 61 61 61 Table of Contents Table of Contents Table of Contents and force users to pay higher fees. Although we generally attempt to pass blockchain transaction fees relating to customer withdrawals through to our customers, we have in the past incurred, and expect to incur from time to time, losses associated with the payment of blockchain transaction fees in excess of what we charge our customers, which could adversely affect our business, operating results, and financial condition.

In recent years, there has been considerable patent, copyright, trademark, domain name, trade secret, and other intellectual property development activity in the onchain economy, as well as litigation, based on allegations of infringement or other violations of intellectual property, including by large financial institutions. The evolving climate and new policy initiatives at the U.S. Patent and Trademark Office (“USPTO”) related to the Patent Trial and Appeal Board are creating a more challenging environment to invalidate patents that are or can be asserted against us. Furthermore, individuals and groups can purchase patents and other intellectual property assets for the purpose of making claims of infringement to extract settlements from companies like ours. Finally, the USPTO has recently implemented and may continue to implement changes that expand the subject matter considered eligible for patent protection, which may make it easier for competitors and other adverse parties to obtain patents related to our platform and technology. Our use of third-party intellectual property rights also may be subject to claims of infringement or misappropriation. We cannot guarantee that our internally developed or acquired technologies and content do not or will not infringe the intellectual property rights of others. From time to time, our competitors or other third parties may claim that we are infringing upon or misappropriating their intellectual property rights, and we may be found to be infringing upon such rights. Any claims or litigation could cause us to incur significant expenses and, if successfully asserted against us, could require that we pay substantial damages or ongoing royalty payments, prevent us from offering our products or services or using certain technologies, force us to implement expensive or less effective work-arounds, or impose other unfavorable terms. We expect that the occurrence of infringement claims is likely to grow as the crypto assets market grows and matures. Accordingly, our exposure to damages resulting from infringement claims could increase and this could further exhaust our financial and management resources. Further, during the course of any litigation, we may make announcements regarding the results of hearings and motions, and other interim developments. If securities analysts and investors regard these announcements as negative, the market price of our Class A common stock may decline. Even if intellectual property claims do not result in litigation or are resolved in our favor, these claims, and the time and resources necessary to resolve them, could divert the resources of our management and require significant expenditures. Any of the foregoing could prevent us from competing effectively and could adversely affect our business, operating results, and financial condition. 70 70 70 70 70 70 Table of Contents Table of Contents Table of Contents

In recent years, there has been considerable patent, copyright, trademark, domain name, trade secret, and other intellectual property development activity in the cryptoeconomy, as well as litigation, based on allegations of infringement or other violations of intellectual property, including by large financial institutions. Furthermore, individuals and groups can purchase patents and other intellectual property assets for the purpose of making claims of infringement to extract settlements from companies like ours. Our use of third-party intellectual property rights also may be subject to claims of infringement or misappropriation. We cannot guarantee that our internally developed or acquired technologies and content do not or will not infringe the intellectual property rights of others. From time to time, our competitors or other third parties may claim that we are infringing upon or misappropriating their intellectual property rights, and we may be found to be infringing upon such rights. Any claims or litigation could cause us to incur significant expenses and, if successfully asserted against us, could require that we pay substantial damages or ongoing royalty payments, prevent us from offering our products or services or using certain technologies, force us to implement expensive or less effective work-arounds, or impose other unfavorable terms. We expect that the occurrence of infringement claims is likely to grow as the crypto assets market grows and matures. Accordingly, our exposure to damages resulting from infringement claims could increase and this could further exhaust our financial and management resources. Further, during the course of any litigation, we may make announcements regarding the results of hearings and motions, and other interim developments. If securities analysts and investors regard these announcements as negative, the market price of our Class A common stock may decline. Even if intellectual property claims do not result in litigation or are resolved in our favor, these claims, and the time and resources necessary to resolve them, could divert the resources of our management and require significant expenditures. Any of the foregoing could prevent us from competing effectively and could adversely affect our business, operating results, and financial condition.

Our business is subject to extensive laws, rules, regulations, policies, orders, determinations, directives, treaties, and legal and regulatory interpretations and guidance in the markets in which we operate, including those governing financial services and banking, federal government contractors, trust companies, securities, derivative transactions and markets, broker-dealers and alternative trading systems (“ATS”), commodities, credit, crypto asset custody, exchange, and transfer, cross-border and domestic money and crypto asset transmission, commercial lending, usury, foreign currency exchange, privacy, data governance, data protection, cybersecurity, fraud detection, payment services (including payment processing and settlement services), consumer protection, escheatment, antitrust and competition, bankruptcy, tax, anti-bribery, economic and trade sanctions, anti-money laundering, and counter-terrorist financing. Many of these legal and regulatory regimes were adopted prior to the advent of the internet, mobile technologies, crypto assets, generative artificial intelligence (“AI”) and related technologies. As a result, some applicable laws and regulations do not contemplate or address unique issues associated with the onchain economy, are subject to significant uncertainty, and vary widely across U.S. federal, state, and local and international jurisdictions. These legal and regulatory regimes, including the laws, rules, and regulations thereunder, evolve frequently and may be modified, interpreted, and applied in an inconsistent manner from one jurisdiction to another, and may conflict with one another. Moreover, the complexity and evolving nature of our business and the significant uncertainty surrounding the regulation of the onchain economy requires us to exercise our judgment as to whether certain laws, rules, and regulations apply to us, and it is possible that governmental bodies and regulators may disagree with our conclusions. To the extent we have not complied with such laws, rules, and regulations, we could be subject to significant fines, revocation of licenses, limitations on or temporary or permanent suspensions of our products and services, reputational harm, and other regulatory consequences, each of which may be significant and could adversely affect our business, operating results, and financial condition. Governmental and regulatory bodies, including in the United States, may introduce new policies, laws, and regulations relating to crypto assets and the onchain economy generally, and crypto asset platforms in particular. Other companies’ failures of risk management and other control functions could contribute to stricter oversight of crypto asset platforms and the onchain economy. Furthermore, new interpretations of existing laws and regulations may be issued by such bodies or the judiciary, which may adversely impact the development of the onchain economy as a whole and our legal and regulatory status in particular by changing how we operate our business, how our products and services are regulated, and what products or services we and our competitors can offer, requiring changes to our compliance and risk mitigation measures, imposing new licensing requirements, or imposing a total ban on certain crypto 29 29 29 29 29 29 Table of Contents Table of Contents Table of Contents asset transactions, as has occurred in certain jurisdictions in the past. For example, in the past few years, regulatory developments in the area of anti-money laundering, recordkeeping and prudential regulatory compliance include the Travel Rule requiring transmission of information with crypto transfers. This and similar regulations increase our compliance costs, may require operational changes, and could subject us to sanctions for technical violations. Moreover, we offer and may in the future offer products and services that may depend on novel forms of customer engagement and interaction delivered via blockchain protocols, particularly as it relates to management of token transaction smart contracts, liquid staking, asset tracking, or other applications. We may also offer products and services whose functionality or value depends on our ability to develop, integrate, or otherwise interact with such applications within the bounds of our legal and compliance obligations. The legal and regulatory landscape for such products, including the law governing the rights and obligations between and among smart contract developers and users and the extent to which such relationships entail regulated activity are fluid. Our interaction with those applications, and the interaction of other blockchain users with any smart contracts or assets we may generate or control, could present legal, operational, reputational, and regulatory risks for our business. We may be further subject to administrative sanctions for technical violations or customer attrition if the user experience suffers as a result. As another example, the extension of anti-money laundering requirements to certain crypto-related activities by the European Union’s Fifth Money Laundering Directive has increased the regulatory compliance burden for our business in Europe and, as a result of the fragmented approach to the implementation of its provisions, resulted in distinct and divergent national licensing and registration regimes for us in different E.U. member states. Additionally, MiCA introduces a comprehensive authorization and compliance regime for crypto asset service providers and a disclosure regime for the issuers of certain crypto assets, which will impact our operations in the European Union, including through localization requirements, due to the obligations associated with our MiCA license (obtained in June 2025). Because we have offered and will continue to offer a variety of innovative products and services to our customers, many of our offerings are subject to significant regulatory uncertainty and we from time to time face regulatory inquiries regarding our current and planned products. For instance, we purchase USDC, a stablecoin redeemable on a one-to-one basis for U.S. dollars, from Circle and sell it to customers on our platform. The regulatory treatment of fiat-backed stablecoins is highly uncertain and has drawn significant attention from legislative and regulatory bodies around the world. The issuance, purchase, and sale of such stablecoins may implicate a variety of banking, deposit, money transmission, prepaid access and stored value, anti-money laundering, commodities, securities, sanctions, and other laws and regulations in the United States and in other jurisdictions. There are substantial uncertainties as to how these requirements would apply in practice, and we may face substantial compliance costs to operationalize and comply with these rules. In July 2025, the United States enacted the Guiding and Establishing National Innovation for U.S. Stablecoins Act (the “GENIUS Act”), which establishes a federal regulatory framework for “payment stablecoins” and their issuers and custodians. As a distributor and ecosystem partner of stablecoins, Coinbase may directly and indirectly be subject to these requirements. Additionally, our event contract products, which allow customers to trade on the outcome of future events, are subject to complex and evolving legal and regulatory frameworks and interpretation. Event contracts, whether offered by us or others, have drawn scrutiny from federal and state regulators and resulted in litigation that we are party to as well as litigation against other companies that offer event contracts. Regulators and authorities in various jurisdictions may assert that these offerings constitute gambling, sports betting, or other regulated activities under state or local laws, rather than federally regulated financial instruments. For example, courts may conclude that state laws attempting to prevent the trading of CFTC-regulated sports-related event contracts are not preempted by the CEA, or that outcome based event contracts are not “swaps” falling within the jurisdiction of the CFTC, which could impact our ability to offer certain event contracts in one or more states and could lead to adverse litigation and regulatory actions against us. 30 30 30 30 30 30 Table of Contents Table of Contents Table of Contents Certain products and services offered by us that we believe are not subject to regulatory oversight, or are only subject to certain regulatory regimes, such as the Base App (formerly Coinbase Wallet), a standalone mobile application that allows customers to manage their own private keys and store their crypto assets directly on their mobile devices, may cause us to be deemed to be engaged in a form of regulated activity for which licensure is required or cause us to become subject to new and additional forms of regulatory oversight. We also offer various staking, rewards, and lending products, all of which are subject to significant regulatory uncertainty, and could implicate a variety of laws and regulations worldwide. For example, there is regulatory uncertainty regarding the status of our staking, lending, rewards, and other yield-generating activities under the U.S. federal and state securities laws. While we have implemented policies and procedures, including geofencing for certain products and services, designed to help monitor for and ensure compliance with existing and new laws and regulations, there can be no assurance that we and our employees, contractors, and agents will not violate or otherwise fail to comply with such laws and regulations. To the extent that we or our employees, contractors, or agents are deemed or alleged to have violated or failed to comply with any laws or regulations, including related interpretations, orders, determinations, directives, or guidance, we or they could be subject to a litany of civil, criminal, and administrative fines, penalties, orders and actions, including being required to suspend or terminate the offering of certain products and services. Moreover, to the extent our customers nevertheless access our platform, products or services outside of jurisdictions where we have obtained required governmental licenses and authorization, we could similarly be subject to a variety of civil, criminal, and administrative fines, penalties, orders and actions as a result of such activity. Due to our business activities, we are subject to ongoing examinations, oversight, and reviews and currently are, and expect in the future, to be subject to investigations and inquiries, by U.S. federal and state regulators and foreign financial service regulators, many of which have broad discretion to audit and examine our business. We are periodically subject to audits and examinations by these regulatory authorities. As a result of findings from these audits and examinations, regulators have required, are requiring, and may in the future require us to take certain actions, including amending, updating, or revising our compliance measures from time to time, limiting the kinds of customers that we provide services to, changing, terminating, or delaying our licenses and the introduction of our existing or new product and services, and undertaking further external audit or being subject to further regulatory scrutiny, including investigations and inquiries. We have received, and may in the future receive, examination reports citing violations of rules and regulations, inadequacies in existing compliance programs, and requiring us to enhance certain practices with respect to our compliance program, including due diligence, monitoring, training, reporting, and recordkeeping. Implementing appropriate measures to properly remediate these examination findings may require us to incur significant costs, and if we fail to properly remediate any of these examination findings, we could face civil litigation, significant fines, damage awards, forced removal of certain employees including members of our executive team, barring of certain employees from participating in our business in whole or in part, revocation of existing licenses, limitations on existing and new products and services, reputational harm, negative impact to our existing relationships with regulators, exposure to criminal liability, or other regulatory consequences. Further, we believe increasingly strict legal and regulatory requirements and additional regulatory investigations and enforcement, any of which could occur or intensify, may continue to result in changes to our business, as well as increased costs, and supervision and examination for ourselves, our agents, and service providers. Moreover, new laws, regulations, or interpretations may result in additional litigation, regulatory investigations, and enforcement or other actions, including preventing or delaying us from offering certain products or services offered by our competitors or could impact how we offer such products and services. Adverse changes to, or our failure to comply with, any laws and regulations have had, and may continue to have, an adverse effect on our reputation and brand and our business, operating results, and financial condition.

Our business is subject to extensive laws, rules, regulations, policies, orders, determinations, directives, treaties, and legal and regulatory interpretations and guidance in the markets in which we operate, including those governing financial services and banking, federal government contractors, trust companies, securities, derivative transactions and markets, broker-dealers and alternative trading systems (“ATS”), commodities, credit, crypto asset custody, exchange, and transfer, cross-border and domestic money and crypto asset transmission, commercial lending, usury, foreign currency exchange, privacy, data governance, data protection, cybersecurity, fraud detection, payment services (including payment processing and settlement services), consumer protection, escheatment, antitrust and competition, bankruptcy, tax, anti-bribery, economic and trade sanctions, anti-money laundering, and counter-terrorist financing. Many of these legal and regulatory regimes were adopted prior to the advent of the internet, mobile technologies, crypto assets, generative artificial intelligence (“AI”) and related technologies. As a result, some applicable laws and regulations do not contemplate or address unique issues associated with the cryptoeconomy, are subject to significant uncertainty, and vary widely across U.S. federal, state, and local and international jurisdictions. These legal and regulatory regimes, including the laws, rules, and regulations thereunder, evolve frequently and may be modified, interpreted, and applied in an inconsistent manner from one jurisdiction to another, and may conflict with one another. Moreover, the complexity and evolving nature of our business and the significant uncertainty surrounding the regulation of the cryptoeconomy requires us to exercise our judgment as to whether certain laws, rules, and regulations apply to us, and it is possible that governmental bodies and regulators may disagree with our conclusions. To the extent we have not complied with such laws, rules, and regulations, we could be subject to significant fines, revocation of licenses, limitations on or temporary or permanent suspensions of our products and services, reputational harm, and other regulatory consequences, each of which may be significant and could adversely affect our business, operating results, and financial condition. Additionally, various governmental and regulatory bodies, including legislative and executive bodies, in the United States and in other countries may adopt new laws and regulations, the direction and timing of which may be influenced by changes in the governing administrations and major events in the cryptoeconomy. For example, following the failure of several prominent crypto trading venues and lending platforms, such as FTX, Celsius Networks, Voyager and Three Arrows Capital in 2022 (the “2022 Events”), the U.S. Congress expressed the need for both greater federal oversight of the cryptoeconomy and comprehensive cryptocurrency legislation. 29 29 29 29 29 29 Table of Contents Table of Contents Table of Contents Governmental and regulatory bodies, including in the United States, may introduce new policies, laws, and regulations relating to crypto assets and the cryptoeconomy generally, and crypto asset platforms in particular. Other companies’ failures of risk management and other control functions, including those that played a role in the 2022 Events, could contribute to stricter oversight of crypto asset platforms and the cryptoeconomy. Furthermore, new interpretations of existing laws and regulations may be issued by such bodies or the judiciary, which may adversely impact the development of the cryptoeconomy as a whole and our legal and regulatory status in particular by changing how we operate our business, how our products and services are regulated, and what products or services we and our competitors can offer, requiring changes to our compliance and risk mitigation measures, imposing new licensing requirements, or imposing a total ban on certain crypto asset transactions, as has occurred in certain jurisdictions in the past. For example, in April 2023, the SEC reopened a comment period for amendments to Rule 3b-16 under the Securities Exchange Act of 1934, as amended (the “Exchange Act”), that could subject several cryptoeconomy participants and systems to registration or other operational compliance requirements under the Exchange Act. If the SEC’s proposed amendment is adopted in its current form, we, along with other cryptoeconomy participants, could face significant additional uncertainty and risk of increased operational costs. In November 2023, the New York Department of Financial Services (“NYDFS”) adopted guidance regarding the policies and procedures required for virtual currency business entities licensed in New York, such as Coinbase, Inc. This guidance and other applicable state law guidance regarding virtual currency business activity could result in changes to our business in such states as well as the risk of increased operational costs and the risk of enforcement actions. If we are unable to comply with any new requirements, our ability to offer our products and services in their current form may be adversely affected. Additionally, under recommendations from the Financial Crimes Enforcement Network (“FinCEN”), and the Financial Action Task Force, the United States and several foreign jurisdictions have or are likely to impose the Funds Travel Rule and the Funds Transfer Rule (commonly referred to collectively as the Travel Rule) on financial service providers in the cryptoeconomy. We may face substantial costs to operationalize and comply with the Travel Rule and may be further subject to administrative sanctions for technical violations or customer attrition if the user experience suffers as a result. In October 2023, FinCEN released a proposed rule that identifies virtual currency “mixing” as a class of transactions of primary money laundering concern and imposes heightened recordkeeping and reporting obligations for financial institutions with respect to those transactions. There are substantial uncertainties regarding the scope of these requirements in practice, and we may face substantial costs to operationalize and comply with these rules. Moreover, we offer and may in the future offer products and services whose functionality or value depends in part on our management of token transaction smart contracts, liquid staking, asset tracking, or other applications that provide novel forms of customer engagement and interaction delivered via blockchain protocols. We may also offer products and services whose functionality or value depends on our ability to develop, integrate, or otherwise interact with such applications within the bounds of our legal and compliance obligations. The legal and regulatory landscape for such products, including the law governing the rights and obligations between and among smart contract developers and users and the extent to which such relationships entail regulated activity is uncertain and rapidly evolving. Our interaction with those applications, and the interaction of other blockchain users with any smart contracts or assets we may generate or control, could present legal, operational, reputational, and regulatory risks for our business. 30 30 30 30 30 30 Table of Contents Table of Contents Table of Contents We may be further subject to administrative sanctions for technical violations or customer attrition if the user experience suffers as a result. As another example, the extension of anti-money laundering requirements to certain crypto-related activities by the European Union’s Fifth Money Laundering Directive, as updated by the European Union’s Sixth Money Laundering Directive, has increased the regulatory compliance burden for our business in Europe and, as a result of the fragmented approach to the implementation of its provisions, resulted in distinct and divergent national licensing and registration regimes for us in different E.U. member states. Further E.U.-level legislation imposing additional regulatory requirements in relation to crypto-related activities is also expected in the near term, such as with the effectiveness of the Markets in Crypto-Assets Regulation (“MiCA”). Among other provisions, MiCA introduces a comprehensive authorization and compliance regime for crypto asset service providers and a disclosure regime for the issuers of certain crypto assets, which is expected to impact our operations in the European Union, including through localization requirements. Because we have offered and will continue to offer a variety of innovative products and services to our customers, many of our offerings are subject to significant regulatory uncertainty and we from time to time face regulatory inquiries regarding our current and planned products. For instance, we purchase USDC, a stablecoin redeemable on a one-to-one basis for U.S. dollars, from Circle and sell it to customers on our platform. The regulatory treatment of fiat-backed stablecoins is highly uncertain and has drawn significant attention from legislative and regulatory bodies around the world. The issuance, purchase, and sale of such stablecoins may implicate a variety of banking, deposit, money transmission, prepaid access and stored value, anti-money laundering, commodities, securities, sanctions, and other laws and regulations in the United States and in other jurisdictions. There are substantial uncertainties on how these requirements would apply in practice, and we may face substantial compliance costs to operationalize and comply with these rules. Certain products and services offered by us that we believe are not subject to regulatory oversight, or are only subject to certain regulatory regimes, such as Coinbase Wallet, a standalone mobile application that allows customers to manage their own private keys and store their crypto assets directly on their mobile devices, may cause us to be deemed to be engaged in a form of regulated activity for which licensure is required or cause us to become subject to new and additional forms of regulatory oversight. We also offer various staking, rewards, and lending products, all of which are subject to significant regulatory uncertainty, and could implicate a variety of laws and regulations worldwide. For example, there is regulatory uncertainty regarding the status of our staking, lending, rewards, and other yield-generating activities under the U.S. federal and state securities laws. While we have implemented policies and procedures, including geofencing for certain products and services, designed to help monitor for and ensure compliance with existing and new laws and regulations, there can be no assurance that we and our employees, contractors, and agents will not violate or otherwise fail to comply with such laws and regulations. To the extent that we or our employees, contractors, or agents are deemed or alleged to have violated or failed to comply with any laws or regulations, including related interpretations, orders, determinations, directives, or guidance, we or they could be subject to a litany of civil, criminal, and administrative fines, penalties, orders and actions, including being required to suspend or terminate the offering of certain products and services. Moreover, to the extent our customers nevertheless access our platform, products or services outside of jurisdictions where we have obtained required governmental licenses and authorization, we could similarly be subject to a variety of civil, criminal, and administrative fines, penalties, orders and actions as a result of such activity. 31 31 31 31 31 31 Table of Contents Table of Contents Table of Contents Due to our business activities, we are subject to ongoing examinations, oversight, and reviews and currently are, and expect in the future, to be subject to investigations and inquiries, by U.S. federal and state regulators and foreign financial service regulators, many of which have broad discretion to audit and examine our business. We are periodically subject to audits and examinations by these regulatory authorities. As a result of findings from these audits and examinations, regulators have, are, and may in the future require us to take certain actions, including amending, updating, or revising our compliance measures from time to time, limiting the kinds of customers that we provide services to, changing, terminating, or delaying our licenses and the introduction of our existing or new product and services, and undertaking further external audit or being subject to further regulatory scrutiny, including investigations and inquiries. We have received, and may in the future receive, examination reports citing violations of rules and regulations, inadequacies in existing compliance programs, and requiring us to enhance certain practices with respect to our compliance program, including due diligence, monitoring, training, reporting, and recordkeeping. Implementing appropriate measures to properly remediate these examination findings may require us to incur significant costs, and if we fail to properly remediate any of these examination findings, we could face civil litigation, significant fines, damage awards, forced removal of certain employees including members of our executive team, barring of certain employees from participating in our business in whole or in part, revocation of existing licenses, limitations on existing and new products and services, reputational harm, negative impact to our existing relationships with regulators, exposure to criminal liability, or other regulatory consequences. Further, we believe increasingly strict legal and regulatory requirements and additional regulatory investigations and enforcement, any of which could occur or intensify, may continue to result in changes to our business, as well as increased costs, and supervision and examination for ourselves, our agents, and service providers. For example, in June 2023, the SEC filed a complaint in the U.S. District Court for the Southern District of New York (the “District Court”) against us and Coinbase, Inc. alleging that (i) Coinbase, Inc. has acted as an unregistered securities exchange, broker, and clearing agency in violation of Sections 5, 15(a) and 17A(b) of the Exchange Act and that, through its staking program, Coinbase, Inc. has offered and sold securities without registering its offers and sales in violation of Sections 5(a) and 5(c) of the Securities Act of 1933, as amended (the “Securities Act”), and (ii) we are liable for the alleged violations as an alleged control person of Coinbase, Inc. (the “June 2023 SEC Complaint”). Moreover, new laws, regulations, or interpretations may result in additional litigation, regulatory investigations, and enforcement or other actions, including preventing or delaying us from offering certain products or services offered by our competitors or could impact how we offer such products and services. Adverse changes to, or our failure to comply with, any laws and regulations have had, and may continue to have, an adverse effect on our reputation and brand and our business, operating results, and financial condition.

As crypto assets have grown in both popularity and market size, various U.S. federal, state, and local and foreign governmental organizations, consumer agencies and public advocacy groups have been examining the operations of crypto networks, users and platforms, with a focus on how crypto assets can be used to launder the proceeds of illegal activities, fund criminal or terrorist enterprises, and simultaneously how to ensure the safety and soundness of platforms and other service providers that hold crypto assets for users. Many of these entities have called for heightened regulatory oversight, and have issued consumer advisories describing the risks posed by crypto assets to users and investors. Competitors, including traditional financial services, have spent years cultivating professional relationships with relevant policymakers on behalf of their industry so that those policymakers may understand that industry, the current legal landscape affecting that industry, and the specific policy proposals that could be implemented in order to responsibly develop that industry. The lobbyists working for these competitors have similarly spent years developing and working to implement strategies to advance these industries. Members of the onchain economy have started to engage policymakers directly and with the help of external advisors and lobbyists. For example, in order to advance our mission, in February 2022 we launched our Coinbase Innovation Political Action Committee to support crypto-forward political candidates and initiatives. Further, in December 2023, we together with a number of other crypto and blockchain market participants supported the launch of the Fairshake Political Action Committee, which supports political candidates who support crypto and blockchain innovation or against political candidates who do not support crypto and blockchain innovation. However, these efforts to educate policymakers and advocate for sensible crypto regulation are nascent compared to more established industries, and may be perceived unfavorably by investors and the public and have an adverse impact on our brand and reputation. As a result, new laws and regulations may be proposed and adopted in the United States and internationally, or existing laws and regulations may be interpreted in new ways, that harm the onchain economy or crypto asset platforms, which could adversely affect our business, operating results, and financial condition.

As crypto assets have grown in both popularity and market size, various U.S. federal, state, and local and foreign governmental organizations, consumer agencies and public advocacy groups have been examining the operations of crypto networks, users and platforms, with a focus on how crypto assets can be used to launder the proceeds of illegal activities, fund criminal or terrorist enterprises, and simultaneously how to ensure the safety and soundness of platforms and other service providers that hold crypto assets for users. Many of these entities have called for heightened regulatory oversight, and have issued consumer advisories describing the risks posed by crypto assets to users and investors. Competitors, including traditional financial services, have spent years cultivating professional relationships with relevant policymakers on behalf of their industry so that those policymakers may understand that industry, the current legal landscape affecting that industry, and the specific policy proposals that could be implemented in order to responsibly develop that industry. The lobbyists working for these competitors have similarly spent years developing and working to implement strategies to advance these industries. Members of the cryptoeconomy have started to engage policymakers directly and with the help of external advisors and lobbyists. For example, in order to advance our mission, in February 2022 we launched our Coinbase Innovation Political Action Committee to support crypto-forward political candidates and initiatives. Further, in December 2023, we together with a number of other crypto and blockchain market participants supported the launch of the Fairshake Political Action Committee to support political candidates in the 2024 U.S. presidential and congressional elections who support crypto and blockchain innovation and responsible regulation. However, these efforts to educate policymakers and advocate for sensible regulation are nascent compared to more established industries, and may be perceived unfavorably by investors and the public and have an adverse impact on our brand and reputation. As a result, new laws and regulations may be proposed and adopted in the United States and internationally, or existing laws and regulations may be interpreted in new ways, that harm the cryptoeconomy or crypto asset platforms, which could adversely affect our business, operating results, and financial condition. 64 64 64 64 64 64 Table of Contents Table of Contents Table of Contents

We hold investments in various DeFi protocols. These protocols achieve their investment purposes through self-executing smart contracts that allow users to invest crypto assets in a pool from which other users can borrow without requiring an intermediate party to facilitate these transactions. These investments earn interest to the investor based on the rates at which borrowers repay the loan, and can generally be withdrawn with no restrictions. However, these DeFi protocols are subject to various risks, including uncertain regulatory and compliance conditions in large markets such as the United States, the risk that the underlying smart contract is insecure, the risk that borrowers may default and the investor will 55 55 55 55 55 55 Table of Contents Table of Contents Table of Contents not be able to recover its investment, the risk that any underlying collateral may experience significant volatility, and the risk of certain core developers with protocol administration rights can make unauthorized or harmful changes to the underlying smart contract. If any of these risks materialize, our investments in these DeFi protocols may be adversely impacted.

We hold investments in various DeFi protocols. These protocols achieve their investment purposes through self-executing smart contracts that allow users to invest crypto assets in a pool from which other users can borrow without requiring an intermediate party to facilitate these transactions. These investments earn interest to the investor based on the rates at which borrowers repay the loan, and can generally be withdrawn with no restrictions. However, these DeFi protocols are subject to various risks, including uncertain regulatory and compliance conditions in large markets such as the United States, the risk that the underlying smart contract is insecure, the risk that borrowers may default and the investor will not be able to recover its investment, the risk that any underlying collateral may experience significant volatility, and the risk of certain core developers with protocol administration rights can make unauthorized 57 57 57 57 57 57 Table of Contents Table of Contents Table of Contents or harmful changes to the underlying smart contract. If any of these risks materialize, our investments in these DeFi protocols may be adversely impacted.

In 2021, the U.S. Congress passed the Infrastructure Investment and Jobs Act (the “IIJA”), providing that brokers would be responsible for reporting to the IRS the transactions of their customers in digital assets, including transfers to other exchanges or to digital asset wallets not connected to any exchange. 60 60 60 60 60 60 Table of Contents Table of Contents Table of Contents In 2024, the U.S. Treasury Department and the IRS released final regulations and issued other administrative guidance on tax information reporting for digital assets (collectively, the “Final Regulations”) that are applicable, in certain cases as of January 1, 2025. Although we believe we are compliant with U.S. tax reporting and withholding requirements, our compliance with the Final Regulations, including but not limited to U.S. onboarding requirements through Forms W-9 and W-8, backup withholding, non-resident alien withholding, and Form 1099 and Form 1042-S reporting obligations, may be subject to scrutiny and may be challenged. There is a risk that we may not properly implement processes and procedures necessary to comply with the Final Regulations, may misinterpret the IIJA, the Final Regulations, or the administrative guidance, or may experience disruptions in the systems recently built. If the IRS determines that we are not in compliance with our tax reporting or withholding obligations, significant taxes and penalties may be imposed, which could adversely affect our financial position. The Final Regulations require us to invest substantially in new compliance processes and procedures, which also could adversely affect our financial position. Further, the IRS may issue additional guidance with respect to tax reporting and withholding obligations, which could impose additional burdens on us and result in significant taxes and penalties that could adversely affect our financial position. Similarly, new rules for reporting crypto assets under the global “common reporting standard” (CRS) and the “crypto-asset reporting framework” (CARF) have been implemented on our operations, creating new obligations and a need to continue investing in new onboarding and reporting infrastructure. Such rules have been adopted by numerous member and observer states of the “Organization for Economic Cooperation and Development” and by the European Commission on behalf of the member states of the European Union. These new rules may give rise to potential liabilities or disclosure requirements for prior customer arrangements and operational challenges that affect how we onboard our customers and report their transactions to taxing authorities. Additionally, the European Union has implemented a directive, commonly referred to as “CESOP” (the Central Electronic System of Payment information), which requires payment service providers in the European Union to report cross-border fiat transactions to taxing authorities on a quarterly basis. Any actual or perceived failure by us to comply with the above or any other tax and financial regulations that apply to our operations could harm our business, lead to customer attrition, and adversely affect our financial position.

In November 2021, the U.S. Congress passed the Infrastructure Investment and Jobs Act (the “IIJA”), providing that brokers would be responsible for reporting to the IRS the transactions of their customers in 62 62 62 62 62 62 Table of Contents Table of Contents Table of Contents digital assets, including transfers to other exchanges or to digital asset wallets not connected to any exchange. On June 28, 2024 and again on December 27, 2024, the U.S. Treasury Department and the IRS released final regulations and issued other administrative guidance on tax information reporting for digital assets (collectively, the “Final Regulations”) that will be applicable, in certain cases starting January 1, 2025 and in certain other cases starting January 1, 2027. The Final Regulations introduced new rules related to our tax reporting and withholding obligations on our customer transactions. Although we believe we are compliant with U.S. tax reporting and withholding requirements with respect to our customers’ crypto asset transactions, our compliance with the Final Regulations, including but not limited to U.S. onboarding requirements through Forms W-9 and W-8, backup withholding, non-resident alien withholding, and Form 1099 and Form 1042-S reporting obligations, may be subject to scrutiny and may be challenged. There is a risk that we may not have proper processes and procedures necessary to comply with the Final Regulations, may not be able to interpret the IIJA, the Final Regulations, or the administrative guidance correctly, or may not be able to build systems within the required timelines to ensure compliance for certain customers or transactions. If the IRS determines that we are not in compliance with our tax reporting or withholding obligations on customer transactions, significant taxes and penalties may be imposed, which could adversely affect our financial position. The Final Regulations will require us to invest substantially in new compliance processes and procedures, which also could adversely affect our financial position. Further, the IRS may issue additional guidance in the future with respect to tax reporting and withholding obligations, which could impose additional burdens on us and result in significant taxes and penalties that could adversely affect our financial position. Similarly, new rules for reporting crypto assets under the global “common reporting standard” (CRS) as well as under the “crypto-asset reporting framework” (CARF) will be implemented on our international operations, creating new obligations and a need to invest in new onboarding and reporting infrastructure. Such rules are under discussion by the member and observer states of the “Organization for Economic Cooperation and Development” and by the European Commission on behalf of the member states of the European Union. These new rules may give rise to potential liabilities or disclosure requirements for prior customer arrangements and new rules that affect how we onboard our customers and report their transactions to taxing authorities. Additionally, the European Union has issued a directive, commonly referred to as “CESOP” (the Central Electronic System of Payment information), which requires payment service providers in the European Union to report cross-border fiat transactions to taxing authorities on a quarterly basis. Any actual or perceived failure by us to comply with the above or any other tax and financial regulations that apply to our operations could harm our business and adversely affect our financial position.

We frequently engage in a wide variety of transactions and maintain relationships with a significant number of crypto projects, their developers, members of their ecosystem, and investors. These transactions and relationships could create potential conflicts of interests in management decisions that we make. For instance, certain of our officers, directors, and employees are active investors in crypto projects themselves, and may make investment decisions that favor projects that they have personally invested in. Many of our large shareholders also make investments in these crypto projects. In addition, our co-founder and Chief Executive Officer, Mr. Armstrong, is involved in a number of initiatives related to the onchain economy and more broadly. For example, Mr. Armstrong currently serves as the chief executive officer of ResearchHub Technologies, Inc., a scientific research development platform. This and 72 72 72 72 72 72 Table of Contents Table of Contents Table of Contents other initiatives he is involved in could divert Mr. Armstrong’s time and attention from overseeing our business operations which could have a negative impact on our business. Moreover, we may in the future be subject to litigation as a result of his involvement with these other initiatives. Similarly, certain of our directors, officers, employees, and large shareholders may hold crypto assets that we are considering supporting for trading on our platform, and may be more supportive of such listing notwithstanding legal, regulatory, and other issues associated with such crypto assets. While we have instituted policies and procedures to limit and mitigate such risks, there is no assurance that such policies and procedures will be effective, or that we will be able to manage such conflicts of interests adequately. If we fail to manage these conflicts of interests, or we receive unfavorable media coverage with respect to actual or perceived conflicts of interest, our business could be harmed and the brand, reputation and credibility of our company could be adversely affected.

We frequently engage in a wide variety of transactions and maintain relationships with a significant number of crypto projects, their developers, members of their ecosystem, and investors. These transactions and relationships could create potential conflicts of interests in management decisions that we make. For instance, certain of our officers, directors, and employees are active investors in crypto projects themselves, and may make investment decisions that favor projects that they have personally invested in. Many of our large stockholders also make investments in these crypto projects. In addition, our co-founder and Chief Executive Officer, Mr. Armstrong, is involved in a number of initiatives related to the cryptoeconomy and more broadly. For example, Mr. Armstrong currently serves as the chief executive officer of ResearchHub Technologies, Inc., a scientific research development platform. This and other initiatives he is involved in could divert Mr. Armstrong's time and attention from overseeing our business operations which could have a negative impact on our business. Moreover, we may in the future be subject to litigation as a result of his involvement with these other initiatives. Similarly, certain of our directors, officers, employees, and large stockholders may hold crypto assets that we are considering supporting for trading on our platform, and may be more supportive of such listing notwithstanding legal, regulatory, and other issues associated with such crypto assets. While we have instituted policies and procedures to limit and mitigate such risks, there is no assurance that such policies and procedures will be effective, or that we will be able to manage such conflicts of interests adequately. If we fail to manage these conflicts of interests, or we receive unfavorable media coverage with respect to actual or perceived conflicts of interest, our business could be harmed and the brand, reputation and credibility of our company could be adversely affected. 74 74 74 74 74 74 Table of Contents Table of Contents Table of Contents

We have experienced, and may experience in the future, periods of significant growth. To effectively manage and capitalize on our growth periods, we will need to manage headcount, capital, and processes efficiently while making investments such as expanding our information technology and financial, operating, and administrative systems and controls, and such initiatives could strain our resources. We could experience operating difficulties in managing our business as it expands across numerous jurisdictions, including difficulties in hiring, training, managing and retaining a remote and evolving employee base, as well as challenges integrating acquired businesses, technologies, and personnel. If we do not adapt or scale to meet these evolving challenges, or if we fail to successfully integrate acquisitions, we may experience erosion to our brand, the quality of our products and services may suffer, and our company culture may be harmed. Moreover, the failure of our systems and processes could undermine our ability to provide accurate, timely, and reliable reports on our financial and operating results, including the financial statements provided herein, and could impact the effectiveness of our internal controls over financial reporting. In addition, our systems and processes may not prevent or detect all errors, omissions, or fraud. Any of the foregoing operational failures could lead to noncompliance with laws and regulations, loss of operating licenses or other authorizations, or loss of financial institution relationships that could substantially impair or even suspend company operations. Successful implementation of our growth strategy will also require significant expenditures before any substantial associated revenue is generated and we cannot guarantee that these increased investments 45 45 45 45 45 45 Table of Contents Table of Contents Table of Contents will result in corresponding and offsetting revenue growth. For example, we may pay substantial premiums for acquired businesses and there can be no assurance that anticipated synergies or benefits will be realized on the timeline expected, or at all. Because we have a limited history operating our business at its current scale, it is difficult to evaluate our current business and future prospects, including our ability to plan for and model future growth. Our limited operating experience at this scale, combined with the rapidly evolving and volatile nature of the crypto asset market in which we operate, and other economic factors beyond our control, reduces our ability to accurately forecast quarterly or annual revenue. Additionally, from time to time, we have realigned our resources and talent to meet evolving business needs. This has previously included layoffs and workforce reductions aimed at cutting costs, improving efficiency, and responding to economic shifts. If there are unforeseen expenses associated with such realignments in our business strategies, and we incur unanticipated charges or liabilities, then we may not be able to effectively realize the expected cost savings or other benefits of such actions. Failure to manage any growth or any scaling back of our operations could have an adverse effect on our business, operating results, and financial condition.

We have experienced, and may experience in the future, periods of significant growth. To effectively manage and capitalize on our growth periods, we will need to manage headcount, capital, and processes efficiently while making investments such as expanding our information technology and financial, operating, and administrative systems and controls, and such initiatives could strain our resources. We could experience operating difficulties in managing our business as it expands across numerous jurisdictions, including difficulties in hiring, training, managing and retaining a remote and evolving employee base. If we do not adapt or scale to meet these evolving challenges, we may experience erosion to our brand, the quality of our products and services may suffer, and our company culture may be harmed. Moreover, the failure of our systems and processes could undermine our ability to provide accurate, timely, and reliable reports on our financial and operating results, including the financial statements provided herein, and could impact the effectiveness of our internal controls over financial reporting. In addition, our systems and processes may not prevent or detect all errors, omissions, or fraud. Any of the foregoing operational failures could lead to noncompliance with laws and regulations, loss of operating licenses or other authorizations, or loss of bank relationships that could substantially impair or even suspend company operations. Successful implementation of our growth strategy will also require significant expenditures before any substantial associated revenue is generated and we cannot guarantee that these increased investments will result in corresponding and offsetting revenue growth. Because we have a limited history operating our business at its current scale, it is difficult to evaluate our current business and future prospects, including our ability to plan for and model future growth. Our limited operating experience at this scale, combined with the rapidly evolving and volatile nature of the crypto asset market in which we operate, and other economic factors beyond our control, reduces our ability to accurately forecast quarterly or annual revenue. Additionally, from time to time, we have realigned our resources and talent to implement stage-appropriate business strategies, including layoffs and reductions in force. For example, in June 2022 and in January 2023, in response to rapidly changing economic conditions and in an effort to reduce our operational costs and improve our organizational efficiency, we reduced our workforce. If there are unforeseen expenses associated with such realignments in our business strategies, and we incur unanticipated charges or liabilities, then we may not be able to effectively realize the expected cost savings or other benefits of such actions. Failure to manage any growth or any scaling back of our operations could have an adverse effect on our business, operating results, and financial condition.

We collect and process large amounts of sensitive data, including personal data related to our customers and their transactions, such as their names, addresses, social security numbers, visa information, copies of government-issued identification, biometric facial recognition data (from scanning of photographs for identity verification and fraud prevention purposes), trading data, tax identification, and bank account information. We face risks, including to our reputation, in the processing and protection of this data, and these risks will increase as our business continues to expand, including through our acquisition of, and investment in, other companies and technologies. Federal, state, and international laws and regulations governing privacy, data protection, and e-commerce transactions require us to safeguard our customers’, employees’, and service providers’ personal data. We have administrative, technical, and physical security measures and controls in place and maintain a robust information security program. However, our security measures, those of our vendors or service providers, or the security measures of companies we acquire, may be inadequate or breached as a result 64 64 64 64 64 64 Table of Contents Table of Contents Table of Contents of third-party action, employee or service provider error, malfeasance, malware, phishing, hacking attacks, system error, trickery, advances in computer capabilities, new discoveries in the field of cryptography, inadequate facility security or otherwise, and, as a result, someone may be able to obtain unauthorized access to sensitive information, including personal data, on our systems. We could be the target of a cybersecurity incident, which could result in harm to our reputation and financial losses. Additionally, our customers have been and could be targeted in cybersecurity incidents like an account takeover, which could result in harm to our reputation and financial losses. For example, as previously disclosed on a Current Report on Form 8-K filed with the SEC on May 15, 2025, a threat actor improperly obtained information about certain customer accounts and internal documentation, and used that information for social-engineering attempts. No passwords or private keys were compromised as a result of this incident. We continue to face risks related to this incident, including harm to our reputation, governmental investigations and regulatory scrutiny, and ongoing litigation. Our future success depends on the reliability and security of our platform. To the extent that the measures we, any companies we acquire, or our third-party service providers, vendors, or business partners have taken prove to be insufficient or inadequate, or to the extent we discover a security breach suffered by a company we acquire following the closing of such acquisition, we may become subject to litigation, breach notification obligations, or regulatory or administrative sanctions, which could result in significant fines, penalties, damages, harm to our reputation, or loss of customers. If our own confidential business information or sensitive customer information were improperly disclosed, our business, operating results, and financial condition could be adversely affected. Additionally, a party who circumvents our security measures could, among other effects, appropriate customer information or other proprietary data, cause interruptions in our operations, or expose customers to hacks, viruses, and other disruptions. The increasing sophistication of AI poses a greater risk of identity fraud, as malicious actors may exploit various AI technologies to create increasingly convincing false identities, transaction records, or attempt to manipulate our verification processes. This necessitates ongoing enhancements to our verification systems and security protocols to prevent unauthorized access and protect sensitive information. Failure to manage these risks or to implement effective countermeasures could lead to unauthorized transactions, financial losses, reputational damage and increased regulatory scrutiny. Depending on the nature of the information compromised, in the event of a data breach or other unauthorized access to our customer data, we may also have obligations to notify customers and regulators about the incident, and we may need to provide some form of remedy, such as a subscription to credit monitoring services, pay significant fines to one or more regulators, or pay compensation in connection with a class-action settlement. Breach notification laws continue to evolve and may be inconsistent from one jurisdiction to another. In the United States, the SEC has adopted rules for mandatory disclosure of material cybersecurity incidents suffered by public companies, as well as cybersecurity governance and risk management. Complying with these obligations could cause us to incur substantial costs and could increase negative publicity surrounding any incident that compromises customer data. Any failure or perceived failure by us to comply with these laws may also subject us to enforcement action or litigation, any of which could harm our business. Additionally, the financial exposure from the events referenced above could either not be insured against or not be fully covered through any insurance that we may maintain, and there can be no assurance that the limitations of liability in any of our contracts would be enforceable or adequate or would otherwise protect us from liabilities or damages as a result of the events referenced above. Any of the foregoing could adversely affect our business, reputation, operating results, and financial condition. Furthermore, we may be required to disclose personal data pursuant to demands from individuals, regulators, government agencies, and law enforcement agencies in various jurisdictions with conflicting privacy and security laws, which could result in a breach of privacy and data protection policies, notices, laws, rules, court orders, and regulations. Additionally, changes in the laws and regulations that govern our collection, use, and disclosure of customer data could impose additional requirements with respect to 65 65 65 65 65 65 Table of Contents Table of Contents Table of Contents the retention and security of customer data, could limit our marketing activities, and adversely affect our business, operating results, and financial condition.

We obtain and process large amounts of sensitive data, including personal data related to our customers and their transactions, such as their names, addresses, social security numbers, visa information, copies of government-issued identification, facial recognition data (from scanning of photographs for identity verification), trading data, tax identification, and bank account information. We face risks, including to our reputation, in the handling and protection of this data, and these risks will increase as our business continues to expand, including through our acquisition of, and investment in, other companies and technologies. Federal, state, and international laws and regulations governing privacy, data protection, and e-commerce transactions require us to safeguard our customers’, employees’, and service providers’ personal data. 66 66 66 66 66 66 Table of Contents Table of Contents Table of Contents We have administrative, technical, and physical security measures and controls in place and maintain a robust information security program. However, our security measures, those of our vendors or service providers, or the security measures of companies we acquire, may be inadequate or breached as a result of third-party action, employee or service provider error, malfeasance, malware, phishing, hacking attacks, system error, trickery, advances in computer capabilities, new discoveries in the field of cryptography, inadequate facility security or otherwise, and, as a result, someone may be able to obtain unauthorized access to sensitive information, including personal data, on our systems. We could be the target of a cybersecurity incident, which could result in harm to our reputation and financial losses. Additionally, our customers have been and could be targeted in cybersecurity incidents like an account takeover, which could result in harm to our reputation and financial losses. For example, in 2021, third parties independently obtained login credentials and personal data for at least 6,000 customers and used those credentials to exploit a vulnerability that previously existed in the account recovery process. We reimbursed impacted customers approximately $25.1 million. Additionally, privacy and data protection laws are evolving, and these laws may be interpreted and applied in a manner that is inconsistent with our data handling safeguards and practices that could result in fines, lawsuits, and other penalties, and significant changes to our or our third-party partners’ business practices and products and service offerings. Our future success depends on the reliability and security of our platform. To the extent that the measures we, any companies we acquire, or our third-party service providers, vendors, or business partners have taken prove to be insufficient or inadequate, or to the extent we discover a security breach suffered by a company we acquire following the closing of such acquisition, we may become subject to litigation, breach notification obligations, or regulatory or administrative sanctions, which could result in significant fines, penalties, damages, harm to our reputation, or loss of customers. If our own confidential business information or sensitive customer information were improperly disclosed, our business, operating results, and financial condition could be adversely affected. Additionally, a party who circumvents our security measures could, among other effects, appropriate customer information or other proprietary data, cause interruptions in our operations, or expose customers to hacks, viruses, and other disruptions. Depending on the nature of the information compromised, in the event of a data breach or other unauthorized access to our customer data, we may also have obligations to notify customers and regulators about the incident, and we may need to provide some form of remedy, such as a subscription to credit monitoring services, pay significant fines to one or more regulators, or pay compensation in connection with a class-action settlement. Breach notification laws continue to evolve and may be inconsistent from one jurisdiction to another. In the United States, the SEC has adopted rules for mandatory disclosure of material cybersecurity incidents suffered by public companies, as well as cybersecurity governance and risk management. Complying with these obligations could cause us to incur substantial costs and could increase negative publicity surrounding any incident that compromises customer data. Any failure or perceived failure by us to comply with these laws may also subject us to enforcement action or litigation, any of which could harm our business. Additionally, the financial exposure from the events referenced above could either not be insured against or not be fully covered through any insurance that we may maintain, and there can be no assurance that the limitations of liability in any of our contracts would be enforceable or adequate or would otherwise protect us from liabilities or damages as a result of the events referenced above. Any of the foregoing could adversely affect our business, reputation, operating results, and financial condition. Furthermore, we may be required to disclose personal data pursuant to demands from individuals, regulators, government agencies, and law enforcement agencies in various jurisdictions with conflicting privacy and security laws, which could result in a breach of privacy and data protection policies, notices, laws, rules, court orders, and regulations. Additionally, changes in the laws and regulations that govern our collection, use, and disclosure of customer data could impose additional requirements with respect to the retention and security of customer data, could limit our marketing activities, and adversely affect our business, operating results, and financial condition. 67 67 67 67 67 67 Table of Contents Table of Contents Table of Contents

The accounting rules and regulations that we must comply with are complex and subject to interpretation by the Financial Accounting Standards Board (the “FASB”), the SEC, and various other bodies formed to promulgate and interpret appropriate accounting principles. Recent actions and public comments from the FASB and the SEC have focused on the integrity of financial reporting and internal controls and many companies’ accounting policies are being subjected to heightened scrutiny by regulators and the public. Further, there remains relatively limited precedent for the financial accounting of crypto assets and related valuation and revenue recognition, even while the crypto ecosystem continues to evolve rapidly, leading in some cases to related accounting standards becoming quickly outdated. Moreover, a change in these principles or interpretations could have a significant effect on our reported financial results, and may even affect the reporting of transactions completed before the announcement or effectiveness of a change. For example, on March 31, 2022, the staff of the SEC issued Staff Accounting Bulletin (“SAB”) No. 121 (“SAB 121”), which represented a significant change regarding how a company safeguarding crypto assets held for its platform users reports such crypto assets on its balance sheet and required retrospective application as of January 1, 2022. In January 2025, the staff of the SEC issued SAB No. 122 (“SAB 122”), which rescinds the previously-issued interpretive guidance included within SAB 121. We adopted SAB 122 as of December 31, 2024 on a retrospective basis. Uncertainties in or changes to regulatory or financial accounting standards could result in the need to change our accounting methods and may retroactively affect previously reported results and impair our 61 61 61 61 61 61 Table of Contents Table of Contents Table of Contents ability to provide timely and accurate financial information, which could adversely affect our financial statements, result in a loss of investor confidence, and our business, operating results, and financial condition.

The accounting rules and regulations that we must comply with are complex and subject to interpretation by the Financial Accounting Standards Board (the “FASB”), the SEC, and various other bodies formed to promulgate and interpret appropriate accounting principles. Recent actions and public comments from the FASB and the SEC have focused on the integrity of financial reporting and internal controls and many companies’ accounting policies are being subjected to heightened scrutiny by regulators and the public. Further, there has been limited precedent for the financial accounting of crypto assets and related valuation and revenue recognition. Moreover, a change in these principles or interpretations could have a significant effect on our reported financial results, and may even affect the reporting of transactions completed before the announcement or effectiveness of a change. For example, in December 2023, the FASB issued Accounting Standards Update No. 2023-08, Intangibles—Goodwill and Other—Crypto Assets (ASU 2023-08): Accounting for and Disclosure of Crypto Assets (“ASU 2023-08”), which represents a significant change in how entities that hold crypto assets will account for certain of those holdings. Previously, crypto assets held were accounted for as intangible assets with indefinite useful lives, which required us to measure crypto assets at cost less impairment. Effective as of January 1, 2024, we adopted ASU 2023-08, which requires us to measure crypto assets held at fair value 63 63 63 63 63 63 Table of Contents Table of Contents Table of Contents at each reporting date, with fair value gains and losses recognized through Net income (loss). Fair value gains and losses can increase the volatility of our net income, especially if the underlying crypto asset market is volatile. Additionally, on March 31, 2022, the staff of the SEC issued Staff Accounting Bulletin (“SAB”) No. 121 (“SAB 121”), which represented a significant change regarding how a company safeguarding crypto assets held for its platform users reports such crypto assets on its balance sheet and required retrospective application as of January 1, 2022. In January 2025, the staff of the SEC issued SAB No. 122 (“SAB 122”), which rescinds the previously-issued interpretive guidance included within SAB 121. We have adopted SAB 122 as of December 31, 2024 on a retrospective basis. Uncertainties in or changes to regulatory or financial accounting standards could result in the need to change our accounting methods and may retroactively affect previously reported results and impair our ability to provide timely and accurate financial information, which could adversely affect our financial statements, result in a loss of investor confidence, and our business, operating results, and financial condition.

We rely on financial institution relationships to provide our platform and custodial services. In particular, customer cash holdings on our platform are held with one or more financial institutions. As a registered money services business with FinCEN under the Bank Secrecy Act, as amended by the USA 39 39 39 39 39 39 Table of Contents Table of Contents Table of Contents PATRIOT Act of 2001, and its implementing regulations enforced by FinCEN, or collectively, the BSA, a licensed money transmitter in a number of U.S. states and territories, a licensee under NYDFS’s Virtual Currency Business Activity regime, commonly referred to as a BitLicense, a licensed electronic money institution and a registered Virtual Asset Service Provider with the U.K. Financial Conduct Authority, a licensed electronic money institution under the Central Bank of Ireland, a MiCA-licensed crypto asset service provider supervised by the Commission de Surveillance du Secteur Financier in Luxembourg, and a limited purpose trust company chartered by the NYDFS, our financial institution partners view us as a higher risk customer for purposes of their anti-money laundering programs. We may face difficulty establishing or maintaining such relationships due to instability in the global banking system, increasing regulatory uncertainty and scrutiny, or our partners’ policies and some prior partners have terminated their relationship with us or have limited access to services. The loss of these partners or the imposition of operational restrictions by these partners and the inability for us to utilize other redundant financial institutions may result in a disruption of business activity as well as regulatory risks. In addition, as a result of the myriad of regulations or the risks of crypto assets generally, financial institutions in the United States and globally may decide to not provide, or be prohibited from providing, account, custody, or other financial services to us or our industry generally. Further, we have existing redundancies in U.S. and global financial institutions that work with crypto companies with which we engage. However, if these financial institutions are subject to bank resolution or failure, or limit or end their crypto market activity, or if such relationships become severely limited or unavailable to crypto market participants in a certain country, there could be temporary delays in or unavailability of services in such country that are critical to our or our partners’ operations, developers or customers, a further limit on available vendors, reduced quality in services we, our partners, our developers or our customers are able to obtain, and a general disruption to the onchain economy, potentially leading to reduced activity on our platform which could adversely affect our business, operating results, and financial condition. For example, while our business and operations have not been materially affected by the closures of Silvergate Capital Corp. and Signature Bank and the cessation of their real-time fiat currency payment networks in March 2023, large industry participants, including us and our institutional customers, experienced a temporary inability to transfer fiat currencies outside of standard business hours. We also rely on insurance carriers to insure customer losses resulting from a breach of our physical security, cybersecurity, or by employee or third party theft and hold surety bonds as required for compliance with certain of our licenses under applicable state laws. Our ability to maintain crime, specie, and cyber insurance, as well as surety bonds, is subject to the insurance carriers’ ongoing underwriting criteria and our inability to obtain and maintain appropriate insurance coverage could cause a substantial business disruption, adverse reputational impact, inability to compete with our competitors, and regulatory scrutiny, and could adversely affect our business, operating results, and financial condition.

We rely on bank relationships to provide our platform and custodial services. In particular, customer cash holdings on our platform are held with one or more of our multiple banking partners. As a registered money services business with FinCEN under the Bank Secrecy Act, as amended by the USA PATRIOT Act of 2001, and its implementing regulations enforced by FinCEN, or collectively, the BSA, a licensed money transmitter in a number of U.S. states and territories, a licensee under NYDFS’s Virtual Currency Business Activity regime, commonly referred to as a BitLicense, a licensed electronic money institution under both the U.K. Financial Conduct Authority and the Central Bank of Ireland, and a limited purpose trust company chartered by the NYDFS, our banking partners view us as a higher risk customer for purposes of their anti-money laundering programs. We may face difficulty establishing or maintaining banking relationships due to instability in the global banking system, increasing regulatory uncertainty and scrutiny, or our banking partners’ policies and some prior bank partners have terminated their relationship with us or have limited access to bank services. The loss of these banking partners or the imposition of operational restrictions by these banking partners and the inability for us to utilize other redundant financial institutions may result in a disruption of business activity as well as regulatory risks. In addition, as a result of the myriad of regulations, the risks of crypto assets generally, the adverse reputational impact of the 2022 Events on our industry, or in the event of an adverse outcome of the June 2023 SEC Complaint, financial institutions in the United States and globally may decide to not provide, or be prohibited from providing, account, custody, or other financial services to us or the cryptoeconomy generally. Further, we have existing redundancies in U.S. and global financial institutions that work with crypto companies with which we engage. However, if these financial institutions are subject to bank resolution or failure, or limit or end their crypto market activity, or if banking relationships become severely limited or unavailable to crypto market participants in a certain country, there could be temporary delays in or unavailability of services in such country that are critical to our or our partners’ operations, developers or customers, a further limit on available vendors, reduced quality in services we, our partners, our developers or our customers are able to obtain, and a general disruption to the cryptoeconomy, potentially leading to reduced activity on our platform which could adversely affect our business, operating results, and financial condition. For 41 41 41 41 41 41 Table of Contents Table of Contents Table of Contents example, while our business and operations have not been materially affected by the closures of Silvergate Capital Corp. and Signature Bank and the cessation of their real-time fiat currency payment networks in March 2023, large cryptoeconomy participants, including us and our institutional customers, experienced a temporary inability to transfer fiat currencies outside of standard business hours. We also rely on insurance carriers to insure customer losses resulting from a breach of our physical security, cybersecurity, or by employee or third party theft and hold surety bonds as required for compliance with certain of our licenses under applicable state laws. Our ability to maintain crime, specie, and cyber insurance, as well as surety bonds, is subject to the insurance carriers’ ongoing underwriting criteria and our inability to obtain and maintain appropriate insurance coverage could cause a substantial business disruption, adverse reputational impact, inability to compete with our competitors, and regulatory scrutiny, and could adversely affect our business, operating results, and financial condition.

Our bylaws, to the fullest extent permitted by law, provides that the Business Court in the First Business Court Division of the State of Texas is the exclusive forum for any derivative action or proceeding brought on our behalf; any action asserting a claim that is based upon a breach of fiduciary duty owed by, or other wrongdoing by, any current or former director, officer, shareholder, employee or agent of ours, arising pursuant to the TBOC, our certificate of formation, or our bylaws; any action asserting a claim against us that is governed by the internal affairs doctrine; or any action asserting an “internal corporate claim” as defined in Section 2.115 of the TBOC. In addition, our certificate of formation provides that we, and our shareholders, directors, and officers, waive their rights to trial by jury in any legal proceeding arising out of or relating to any “internal entity claim.” Moreover, Section 22 of the Securities Act creates concurrent jurisdiction for federal and state courts over all claims brought to enforce any duty or liability created by the Securities Act or the rules and regulations thereunder and our bylaws provide that the federal district courts of the United States of America are, to the fullest extent permitted by law, the exclusive forum for resolving any complaint asserting a cause of action arising under the Securities Act, or a Federal Forum Provision, unless we consent in writing to the selection of an alternative forum. While there can be no assurance that federal or state courts will follow determine that the Federal Forum Provision should be enforced in a particular case, application of the Federal Forum Provision means that suits brought by our shareholders to enforce any duty or liability created by the Securities Act must be brought in federal court and cannot be brought in state court. Section 27 of the Exchange Act creates exclusive federal jurisdiction over all claims brought to enforce any duty or liability created by the Exchange Act or the rules and regulations thereunder. The Federal Forum Provision applies to suits brought to enforce any duty or liability created by the Exchange Act to the fullest extent permitted by law. Accordingly, actions by our shareholders to enforce any duty or liability created by the Exchange Act or the rules and regulations thereunder must be brought in federal court. Our shareholders will not be deemed to have waived our compliance with the federal securities laws and the regulations promulgated thereunder. Any person or entity purchasing or otherwise acquiring or holding any interest in any of our securities will be deemed to have notice of and consented to our exclusive forum provisions, including the Federal Forum Provision. These provisions may limit our shareholders’ ability to bring a claim in a judicial forum they find favorable for disputes with us or our directors, officers, or other employees, which may discourage lawsuits against us and our directors, officers, and other employees. Alternatively, if a court were to find the choice of forum provision contained in our bylaws to be inapplicable or unenforceable in an action, we may incur additional costs associated with resolving such action in other jurisdictions, which could harm our business, operating results, and financial condition.

Our restated certificate of incorporation, to the fullest extent permitted by law, provides that the Court of Chancery of the State of Delaware is the exclusive forum for any derivative action or proceeding brought on our behalf; any action asserting a claim that is based upon a breach of fiduciary duty; any action asserting a claim against us or any current or former director, officer, stockholder, employee or agent of ours, arising pursuant to the DGCL, our restated certificate of incorporation, or our restated bylaws; any action asserting a claim against us that is governed by the internal affairs doctrine; or any action asserting an “internal corporate claim” as defined in Section 115 of the DGCL. Moreover, Section 22 of the Securities Act creates concurrent jurisdiction for federal and state courts over all claims brought to enforce any duty or liability created by the Securities Act or the rules and regulations thereunder and our restated certificate of incorporation provides that the federal district courts of the United States of America are, to the fullest extent permitted by law, the exclusive forum for resolving any complaint asserting a cause of action arising under the Securities Act, or a Federal Forum Provision, unless we consent in writing to the selection of an alternative forum. Our decision to adopt a Federal Forum Provision followed a decision by the Supreme Court of the State of Delaware holding that such provisions are facially valid under Delaware law. While there can be no assurance that federal or state courts will follow the holding of the Delaware Supreme Court or determine that the Federal Forum Provision should be enforced in a particular case, application of the Federal Forum Provision means that suits brought by our stockholders to enforce any duty or liability created by the Securities Act must be brought in federal court and cannot be brought in state court. Section 27 of the Exchange Act creates exclusive federal jurisdiction over all claims brought to enforce any duty or liability created by the Exchange Act or the rules and regulations thereunder. The Federal Forum Provision applies to suits 84 84 84 84 84 84 Table of Contents Table of Contents Table of Contents brought to enforce any duty or liability created by the Exchange Act to the fullest extent permitted by law. Accordingly, actions by our stockholders to enforce any duty or liability created by the Exchange Act or the rules and regulations thereunder must be brought in federal court. Our stockholders will not be deemed to have waived our compliance with the federal securities laws and the regulations promulgated thereunder. Any person or entity purchasing or otherwise acquiring or holding any interest in any of our securities will be deemed to have notice of and consented to our exclusive forum provisions, including the Federal Forum Provision. These provisions may limit our stockholders’ ability to bring a claim in a judicial forum they find favorable for disputes with us or our directors, officers, or other employees, which may discourage lawsuits against us and our directors, officers, and other employees. Alternatively, if a court were to find the choice of forum provision contained in our restated certificate of incorporation to be inapplicable or unenforceable in an action, we may incur additional costs associated with resolving such action in other jurisdictions, which could harm our business, operating results, and financial condition.

In October 2024, our board of directors authorized and approved a share repurchase program, which provided for the repurchase of up to $1.0 billion of our outstanding Class A common stock without expiration. In October 2025, our board of directors (i) increased the aggregate repurchase authorization under the program from $1.0 billion to $2.0 billion and (ii) expanded the scope of the repurchases to include a portion of the aggregate principal amount of our outstanding 2026 Convertible Notes, 2029 Convertible Notes, 2030 Convertible Notes, 2032 Convertible Notes, and both series of Senior Notes (collectively, the “Notes”). In January 2026, our board of directors approved a $2.0 billion increase in the authorization of our previously announced repurchase program from $2.0 billion to $4.0 billion (as modified, the “Repurchase Program”). Repurchases may be made from time to time in the open market (including through trading plans intended to qualify under Rule 10b5-1 under the Securities Exchange Act of 1934, as amended (the “Exchange Act”)), in privately negotiated transactions, in a tender offer, or by other methods in accordance with the applicable federal and state laws and regulations. The timing of any repurchases will depend on market conditions and other considerations, and will be made at our discretion. The Repurchase Program does not obligate us to repurchase any dollar amount or number of shares of our Class A common stock or Notes and may be modified, suspended, or discontinued at any time. The Repurchase Program could affect the price of our Class A common stock and increase the volatility thereof. Price volatility may cause the average price at which we repurchase our Class A common stock or Notes in a given period to exceed the stock’s price at a given point in time. There can be no assurance that the Repurchase Program will have a positive impact on our Class A common stock price or net income (loss) per share. Important factors that could cause us to discontinue or decrease repurchases under the Repurchase Program include, among others: unfavorable market conditions; the market price of our Class A common stock; the nature of other investment or strategic opportunities presented to us from time to time; our ability to make appropriate, timely, and beneficial decisions as to when, how, and whether to effect repurchases; and the availability of funds necessary to fulfill such repurchases. 81 81 81 81 81 81 Table of Contents Table of Contents Table of Contents

In October 2024, our board of directors authorized and approved the Share Repurchase Program, which provides for the repurchase of up to $1.0 billion of our outstanding Class A common stock without expiration. Repurchases may be made from time to time in the open market (including through trading plans intended to qualify under Rule 10b5-1 under the Exchange Act), in privately negotiated transactions, or by other methods in accordance with the applicable federal and state laws and regulations. The timing of any repurchases will depend on market conditions and will be made at our discretion. The Share Repurchase Program does not obligate us to repurchase any dollar amount or number of shares of our Class A common stock, and the program may be modified, suspended, or discontinued at any time. The Share Repurchase Program could affect the price of our Class A common stock and increase the volatility thereof. Price volatility may cause the average price at which we repurchase our Class A common stock in a given period to exceed the stock’s price at a given point in time. There can be no assurance that the Share Repurchase Program will have a positive impact on our Class A common stock price or net income (loss) per share. Important factors that could cause us to discontinue or decrease share repurchases under the Share Repurchase Program include, among others: unfavorable market conditions; the market price of our Class A common stock; the nature of other investment or strategic opportunities presented to us from time to time; our ability to make appropriate, timely, and beneficial decisions as to when, how, and whether to repurchase shares under the Share Repurchase Program; and the availability of funds necessary to fulfill such repurchases.

The CFTC has stated and judicial decisions involving CFTC enforcement actions have confirmed that at least some crypto assets, including Bitcoin, ether, litecoin, and stablecoins, such as USDC, USDT and BUSD, fall within the definition of a “commodity” under the U.S. Commodities Exchange Act of 1936 (the “CEA”). As a result, the CFTC has general enforcement authority to police against manipulation and fraud in at least some spot crypto asset markets. From time to time, manipulation, fraud, and other forms of improper trading by market participants have resulted in, and may in the future result in, CFTC investigations, inquiries, enforcement action, and similar actions by other regulators, government agencies, and civil litigation. Such investigations, inquiries, enforcement actions, and litigation may cause us to incur substantial costs and could result in negative publicity. Furthermore, the CTFC has regulatory authority over certain product offerings, including event contracts, which are regulated as “swaps” under the CEA. This classification subjects us to the CFTC’s supervisory and enforcement oversight, including supervisory requirements to prevent manipulation, fraud and other forms of improper trading in these markets. As a result, the offering and facilitation of these contracts on our platform could result in increased regulatory scrutiny, investigations, and enforcement actions, which may cause us to incur substantial costs and expose us to civil liability, fines, and reputational harm. Some states have taken the position that the states and not the CFTC should be the appropriate regulator for sports-related event contracts and that question is the subject of ongoing litigation. See the Risk Factor titled “We are subject to an extensive, highly-evolving and uncertain regulatory landscape and any adverse changes to, or our failure to comply with, any laws and regulations could adversely affect our brand, reputation, business, operating results, and financial condition.” for additional information.

The CFTC has stated and judicial decisions involving CFTC enforcement actions have confirmed that at least some crypto assets, including Bitcoin, ether, litecoin, and stablecoins, such as USDC, USDT and BUSD, fall within the definition of a “commodity” under the U.S. Commodities Exchange Act of 1936 (the “CEA”). As a result, the CFTC has general enforcement authority to police against manipulation and fraud in at least some spot crypto asset markets. From time to time, manipulation, fraud, and other forms of improper trading by market participants have resulted in, and may in the future result in, CFTC investigations, inquiries, enforcement action, and similar actions by other regulators, government agencies, and civil litigation. Such investigations, inquiries, enforcement actions, and litigation may cause us to incur substantial costs and could result in negative publicity.

Provisions in our certificate of formation and bylaws may have the effect of delaying or preventing a merger, acquisition, or other change of control of our company that the shareholders may consider favorable. In addition, because our board of directors is responsible for appointing the members of our management team, these provisions may frustrate or prevent any attempts by our shareholders to replace or remove our current management by making it more difficult for shareholders to replace members of our board of directors. Our certificate of formation and bylaws include provisions that: •permit our board of directors to establish the number of directors and fill any vacancies and newly-created directorships; •require super-majority voting to amend some provisions in our certificate of formation and bylaws; •authorize the issuance of “blank check” preferred stock and common stock that our board of directors could use to implement a shareholder rights plan or issue other shares of preferred stock or common stock, including blockchain tokens; •provide that only our Chief Executive Officer, the chairperson of our board of directors, a majority of our board of directors, or the holders of not less than 50% of the voting power of our shareholders will be authorized to call a special meeting of shareholders; •provide that, in certain circumstances, any shareholder action by written consent must be unanimous; •prohibit cumulative voting; •provide for a dual class common stock structure in which holders of our Class B common stock have the ability to control the outcome of matters requiring shareholder approval, even if they own significantly less than a majority of the outstanding shares of our Class A common stock and Class B common stock, including the election of directors and significant corporate transactions, such as a merger or other sale of our company or its assets; •provide that the board of directors is expressly authorized to make, alter, or repeal our bylaws; and •provide for advance notice requirements for nominations for election to our board of directors or for proposing matters that can be acted upon by shareholders at annual shareholder meetings. Moreover, Subchapter M of Chapter 21 of the Texas Business Organizations Code (the “TBOC”) may discourage, delay, or prevent a change of control of our company, and imposes certain restrictions on mergers, business combinations, and other transactions between holders of 20% or more of our common stock and us. In addition, a third party attempting to acquire us or a substantial position in our common stock may be delayed or ultimately prevented from doing so by change in ownership or control regulations to which our regulated broker-dealer subsidiaries are subject. FINRA Rule 1017 generally provides that FINRA approval must be obtained in connection with any transaction resulting in a single person or entity owning, directly or indirectly, 25% or more of a member firm’s equity and would include a change of control of a parent company. 82 82 82 82 82 82 Table of Contents Table of Contents Table of Contents

Provisions in our restated certificate of incorporation and restated bylaws may have the effect of delaying or preventing a merger, acquisition, or other change of control of our company that the stockholders may consider favorable. In addition, because our board of directors is responsible for appointing the members of our management team, these provisions may frustrate or prevent any attempts by our stockholders to replace or remove our current management by making it more difficult for stockholders to replace members of our board of directors. Our restated certificate of incorporation and restated bylaws include provisions that: •permit our board of directors to establish the number of directors and fill any vacancies and newly-created directorships; •require super-majority voting to amend some provisions in our restated certificate of incorporation and restated bylaws; •authorize the issuance of “blank check” preferred stock and common stock that our board of directors could use to implement a stockholder rights plan or issue other shares of preferred stock or common stock, including blockchain tokens; 83 83 83 83 83 83 Table of Contents Table of Contents Table of Contents •provide that only our Chief Executive Officer, the chairperson of our board of directors, or a majority of our board of directors will be authorized to call a special meeting of stockholders; •eliminate the ability of our stockholders to call special meetings of stockholders; •prohibit cumulative voting; •provide for a dual class common stock structure in which holders of our Class B common stock have the ability to control the outcome of matters requiring stockholder approval, even if they own significantly less than a majority of the outstanding shares of our Class A common stock and Class B common stock, including the election of directors and significant corporate transactions, such as a merger or other sale of our company or its assets; •provide that the board of directors is expressly authorized to make, alter, or repeal our restated bylaws; and •provide for advance notice requirements for nominations for election to our board of directors or for proposing matters that can be acted upon by stockholders at annual stockholder meetings. Moreover, Section 203 of the Delaware General Corporation Law (the “DGCL”) may discourage, delay, or prevent a change of control of our company. Section 203 imposes certain restrictions on mergers, business combinations, and other transactions between holders of 15% or more of our common stock and us. In addition, a third party attempting to acquire us or a substantial position in our common stock may be delayed or ultimately prevented from doing so by change in ownership or control regulations to which our regulated broker-dealer subsidiaries are subject. FINRA Rule 1017 generally provides that FINRA approval must be obtained in connection with any transaction resulting in a single person or entity owning, directly or indirectly, 25% or more of a member firm’s equity and would include a change of control of a parent company.

We have been, currently are, and may from time to time become subject to claims, arbitrations, individual and class action lawsuits with respect to a variety of matters, including employment, consumer protection, intellectual property, privacy, information security, data protection, advertising, and securities. In addition, we have been, currently are, and may from time to time become subject to, government and regulatory investigations, inquiries, actions or requests, other proceedings and enforcement actions alleging violations of laws, rules, and regulations, both foreign and domestic. For a description of our material litigation, regulatory investigations, and other proceedings, see Note 21. Commitments and Contingencies of the Notes to our Consolidated Financial Statements included in Part II, Item 8 of this Annual Report on Form 10-K. The scope, determination, and impact of claims, lawsuits, government and regulatory investigations, enforcement actions, disputes, and proceedings to which we are subject cannot be predicted with certainty and may result in: •substantial payments to satisfy judgments, fines, or penalties; •substantial outside counsel, advisor, and consultant fees and costs; •substantial administrative costs, including arbitration fees; •additional compliance and licensure requirements; •loss or non-renewal of existing licenses or authorizations, or prohibition from or delays in obtaining additional licenses or authorizations, required for our business; •loss of productivity and high demands on employee time; •criminal sanctions or consent decrees; •termination of certain employees, including members of our executive team; •barring of certain employees from participating in our business in whole or in part; •orders that restrict our business or prevent us from offering certain products or services; •changes to our business model and practices; •delays to planned transactions, product launches or improvements; and •damage to our brand and reputation. 35 35 35 35 35 35 Table of Contents Table of Contents Table of Contents Because of our large customer base, actions against us may claim large monetary damages, even if the alleged per-customer harm is small or non-existent. From time to time, we receive letters alleging claims on behalf of our users. Due to our large customer base, the ongoing defense and resolution or settlement of these alleged claims could be material and we may incur significant expenses associated with arbitrating or litigating the claims. Moreover, to the extent that a deterioration of the crypto asset market occurs, large platforms like us may become subject to or the target of increased litigation and additional government and regulatory scrutiny. Regardless of the outcome, any such matters could adversely affect our business, operating results, and financial condition because of legal costs, diversion of management resources, reputational damage, and other factors.

We have been, currently are, and may from time to time become subject to claims, arbitrations, individual and class action lawsuits with respect to a variety of matters, including employment, consumer protection, advertising, and securities. In addition, we have been, currently are, and may from time to time become subject to, government and regulatory investigations, inquiries, actions or requests, other proceedings and enforcement actions alleging violations of laws, rules, and regulations, both foreign and domestic. For example, in January 2023, we settled a NYDFS compliance investigation for a monetary penalty of $50.0 million and a separate commitment to make $50.0 million in compliance program investments by the end of 2024. In June 2023, the SEC filed the June 2023 SEC Complaint, in connection with which the SEC is seeking, among other relief, injunctive relief, disgorgement, and civil money penalties, and we and Coinbase, Inc. subsequently filed an answer to the June 2023 SEC Complaint. In August 2023, we and Coinbase, Inc. also filed a motion for judgment on the pleadings. In October 2023, the SEC filed its response and we and Coinbase, Inc. filed our reply. Oral argument took place on January 17, 2024 and on March 27, 2024, the District Court denied in part and granted in part our motion for judgment on the pleadings. Subsequently, on April 12, 2024, we and Coinbase, Inc. filed a motion with the District Court seeking certification of an interlocutory appeal to the U.S. Court of Appeals for the Second Circuit (the “Court of Appeals”). The District Court granted that motion on January 7, 2025 and stayed proceedings in the District Court. On January 17, 2025, we and Coinbase, Inc. filed a petition for permission to appeal to the Court of Appeals. The impact of the litigation relating to the June 2023 SEC Complaint, including the costs, timing, results and other potential consequences thereof, are unknown at this time. An adverse resolution of the June 2023 SEC Complaint could have a material impact on our business, operating results and financial condition. Additionally, we are currently subject to securities class actions and shareholder derivative actions. Furthermore, in June 2023, we and Coinbase, Inc. were issued notices, show-cause orders, and cease-and-desist letters, and became the subject of various legal actions initiated by U.S. state securities regulators in the states of Alabama, California, Illinois, Kentucky, Maryland, New Jersey, South Carolina, Vermont, Washington, and Wisconsin alleging violations of state securities laws with respect to staking services provided by Coinbase, Inc. (the “State Staking Actions”). In July 2023, we and Coinbase, Inc. entered into agreements with state securities regulators in California, New Jersey, South Carolina, and Wisconsin, pursuant to which customers in those states will no longer be able to stake new funds, in each case pending final adjudication of the matters. In October 2023, we and Coinbase, Inc. entered into a similar agreement with the Maryland state securities regulator. For a description of such litigation, regulatory investigations, and other proceedings, see Note 21. Commitments and Contingencies of the Notes to our Consolidated Financial Statements included in Part II, Item 8 of this Annual Report on Form 10-K. The scope, determination, and impact of claims, lawsuits, government and regulatory investigations, enforcement actions, disputes, and proceedings to which we are subject cannot be predicted with certainty and may result in: 36 36 36 36 36 36 Table of Contents Table of Contents Table of Contents •substantial payments to satisfy judgments, fines, or penalties; •substantial outside counsel, advisor, and consultant fees and costs; •substantial administrative costs, including arbitration fees; •additional compliance and licensure requirements; •loss or non-renewal of existing licenses or authorizations, or prohibition from or delays in obtaining additional licenses or authorizations, required for our business; •loss of productivity and high demands on employee time; •criminal sanctions or consent decrees; •termination of certain employees, including members of our executive team; •barring of certain employees from participating in our business in whole or in part; •orders that restrict our business or prevent us from offering certain products or services; •changes to our business model and practices; •delays to planned transactions, product launches or improvements; and •damage to our brand and reputation. Because of our large customer base, actions against us may claim large monetary damages, even if the alleged per-customer harm is small or non-existent. From time to time, we receive letters alleging claims on behalf of our users. Due to our large customer base, the ongoing defense and resolution or settlement of these alleged claims could be material and we may incur significant expenses associated with arbitrating or litigating the claims. Moreover, to the extent that a deterioration of the crypto asset market occurs for a prolonged period, large platforms like us may become subject to or the target of increased litigation and additional government and regulatory scrutiny. Regardless of the outcome, any such matters could adversely affect our business, operating results, and financial condition because of legal costs, diversion of management resources, reputational damage, and other factors.