Theriva Biologics Inc

Evaluation of Disclosure Controls and Procedures

We adopted and maintaindisclosure controls and procedures that are designed to provide reasonable assurance that information required to be disclosed in the reports filed under the Exchange Act, such as this Annual Report on Form 10-K, is collected, recorded, processed, summarized and reported within the time periods specified under the rules of the SEC. Our disclosure controls and procedures are also designed to ensure that such information is accumulated and communicated to management to allow timely decisions regarding required disclosure. As required under Exchange Act Rule 13a-15, our management, including the Chief Executive Officer who also serves as our Chief Financial Officer, evaluated the effectiveness of disclosure controls and procedures (as defined in Exchange Act Rules 13a-15(e) and 15d-15(e)) as of the end of the period covered by this Annual Report on Form 10-K. Due to the material weaknesses in internal control over financial reporting as described below, our Chief Executive Officer who also serves as our Chief Financial Officer concluded that, as of the end of the period covered by this report, our disclosure controls and procedures were not effective.

Management’s Annual Report on Internal Control Over Financial Reporting

Our management is responsible for establishing and maintaining adequate internal control over financial reporting, as defined in Exchange Act Rule 13a-15. Internal control over financial reporting is defined in Rule 13a-15(f) and 15(d)-15(f) under the Exchange Act as a process designed to provide reasonable assurance to our management and Board of Directors regarding the preparation and fair presentation of published financial statements. Management conducted an assessment of our internal control over financial reporting as of December 31, 2023 based on the framework and criteria established by the Committee of Sponsoring Organizations of the Treadway Commission in Internal Control-Integrated Framework (2013). Based on the assessment, management concluded that, as of December 31, 2023, our internal control over financial reporting was not effective.

Our management, including our Chief Executive Officer who is also our Chief Financial Officer, does not expect that our disclosure controls and procedures and our internal control processes will prevent all errors or fraud. A control system, no matter how well conceived and operated, can provide only reasonable, not absolute, assurance that the objectives of the control system are met. Further, the design of a control system must reflect the fact that there are resource constraints, and the benefits of controls must be considered relative to their costs. Because of the inherent limitations in all control systems, no evaluation of controls can provide absolute assurance that all control issues and instances of error or fraud, if any, within our Company have been detected. These inherent limitations include the realities that judgments in decision-making can be faulty, and that breakdowns can occur because of simple error or mistake. Additionally, controls can be circumvented by the individual acts of some persons, by collusion of two or more people, or by management override of the control. The design of any system of controls also is based in part upon certain assumptions about the likelihood of future events, and there can be no assurance that any design will succeed in achieving its stated goals under all potential future conditions. Over time, controls may become inadequate because of changes in conditions, or the degree of compliance with the policies or procedures may deteriorate. Because of the inherent limitations in a cost-effective control system, misstatements due to error or fraud may occur and may not be detected. However, these inherent limitations are known features of the financial reporting process. Therefore, it is possible to design into the process safeguards to reduce, though not eliminate, this risk.

A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of the company’s annual or interim financial statements will not be prevented or detected on a timely basis.

Based on its assessment, management has concluded that the Company did not maintain effective internal control over financial reporting as of December 31, 2023, due to the following previously reported material weaknesses that continued to exist:

Management’s Plan for Remediation

In response to the material weaknesses, management, with oversight of the Audit Committee of the Board of Directors, has identified and begun to implement steps to remediate the material weaknesses. The company hired an third party consultant during 2023 to assist with the remediation efforts. While the Company has made progress during 2023, the remediation efforts are ongoing, as additional time is needed to complete the remediation and allow for the internal controls to be tested by management. Our continued internal control remediation efforts include the following:

We are committed to ensuring that our internal controls over financial reporting are designed and operating effectively. Management believes the efforts taken to date and the planned remediation will improve the effectiveness of our internal control over financial reporting. While these remediation efforts are ongoing, the controls must be operating effectively for a sufficient period of time and be tested by management in order to consider them remediated and conclude that the design is effective to address the risks of material misstatement.

Changes in Internal Control Over Financial Reporting

Except for the material weaknesses described above, there has been no change in the Company’s internal control over financial reporting during the Company’s most recent quarter that has materially affected, or is reasonably likely to materially affect, the Company’s internal control over financial reporting.