SUNation Energy, Inc.

If we or our third-party service providers experience a security breach or cyberattack and unauthorized parties obtain access to our bitcoin, or if our private keys are lost or destroyed, or other similar circumstances or events occur, we may lose some or all of our bitcoin and our financial condition and results of operations could be materially adversely affected.

Currently, we intend to hold any bitcoin we may own, in custody accounts at U.S.-based institutional-grade digital asset custodians. Security breaches and cyberattacks are of particular concern with respect to our bitcoin. Bitcoin and other blockchain-based cryptocurrencies and the entities that provide services to participants in the bitcoin ecosystem have been, and may in the future be, subject to security breaches, cyberattacks, or other malicious activities. For example, in October 2021 it was reported that hackers exploited a flaw in the account recovery process and stole from the accounts of at least 6,000 customers of the Coinbase exchange, although the flaw was subsequently fixed and Coinbase reimbursed affected customers. Similarly, in November 2022, hackers exploited weaknesses in the security architecture of the FTX Trading digital asset exchange and reportedly stole over $400 million in digital assets from customers. A successful security breach or cyberattack could result in:

Further, any actual or perceived data security breach or cybersecurity attack directed at other companies with digital assets or companies that operate digital asset networks, regardless of whether we are directly impacted, could lead to a general loss of confidence in the broader bitcoin blockchain ecosystem or in the use of the bitcoin network to conduct financial transactions, which could negatively impact us.

Attacks upon systems across a variety of industries, including industries related to bitcoin, are increasing in frequency, persistence, and sophistication, and, in many cases, are being conducted by sophisticated, well-funded and organized groups and individuals, including state actors. The techniques used to obtain unauthorized, improper or illegal access to systems and information (including personal data and digital assets), disable or degrade services, or sabotage systems are constantly evolving, may be difficult to detect quickly, and often are not recognized or detected until after they have been launched against a target. These attacks may occur on our systems or those of our third-party service providers or partners. We may experience breaches of our security measures due to human error, malfeasance, insider threats, system errors or vulnerabilities or other irregularities. In particular, we expect that unauthorized parties will attempt to gain access to our systems and facilities, as well as those of our partners and third-party service providers, through various means, such as hacking, social engineering, phishing and fraud. Threats can come from a variety of sources, including criminal hackers, hacktivists, state-sponsored intrusions, industrial espionage, and insiders. In addition, certain types of attacks could harm us even if our systems are left undisturbed. For example, certain threats are designed to remain dormant or undetectable, sometimes for extended periods of time, or until launched against a target and we may not be able to implement adequate preventative measures. Further, there has been an increase in such activities due to the increase in work-from-home arrangements. The risk of cyberattacks could also be increased by cyberwarfare in connection with the ongoing Russia-Ukraine and Israel-Hamas conflicts, or other future conflicts, including potential proliferation of malware into systems unrelated to such conflicts. Any future breach of our operations or those of others in the bitcoin industry, including third-party services on which we rely, could materially and adversely affect our financial condition and results of operations.

ITEM 1B. UNRESOLVED STAFF COMMENTS

None.