ECB Bancorp, Inc. /MD/

Evaluation of disclosure controls and procedures. Under the supervision and with the participation of our management, including our Principal Executive Officer and Principal Financial Officer, we evaluated the effectiveness of the design and operation of our disclosure controls and procedures (as defined in Rule 13a-15(e) and 15d-15(e) under the Exchange Act) as of the end of the period covered by this report. Based upon that evaluation, the Principal Executive Officer and Principal Financial Officer concluded that, as of the end of the period covered by this report, our disclosure controls and procedures were effective.

***Management's report on internal control over financial reporting.***Management of the Company is responsible for establishing and maintaining adequate internal control over financial reporting.

The Company’s internal control over financial reporting is a process designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with accounting principles generally accepted in the United States of America. The Company’s internal control over financial reporting includes those policies and procedures that (i) pertain to the maintenance of records that, in reasonable detail, accurately and fairly reflect the transactions and dispositions of the assets of the Company; (ii) provide reasonable assurance that transactions are recorded as necessary to permit preparation of financial statements in accordance with accounting principles generally accepted in the United States of America, and that receipts and expenditures of the Company are being made only in accordance with authorizations of management and directors of the Company; and (iii) provide reasonable assurance regarding prevention or timely detection of unauthorized acquisition, use, or disposition of the Company’s assets that could have a material effect on the financial statements.

Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate.

Management, including the principal executive officer and principal financial officer, assessed the effectiveness of the Company’s internal control over financial reporting. As of December 31, 2025, based on the criteria set forth by the Committee of Sponsoring Organizations of the Treadway Commission (“COSO”) in “Internal Control-Integrated Framework (2013).” Based on such assessment, management believes that, as of December 31, 2025, the Company’s internal control over financial reporting is effective, based on those criteria.

This Annual Report does not include an attestation report of the Company’s registered public accounting firm.

Internal control over financial reporting. During the quarter ended December 31, 2025, there have been no changes in the Company’s internal control over financial reporting that have materially affected, or are reasonably likely to materially affect, the Company’s internal control over financial reporting.

This Annual Report does not include an attestation report of the independent registered public accounting firm regarding internal control over financial reporting because the Company is an emerging growth company.