BITMINE IMMERSION TECHNOLOGIES, INC.

We conduct periodic risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats. These risk assessments include identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.

Following these risk assessments, we redesign, implement, and maintain reasonable safeguards to minimize identified risks; reasonably address any identified gaps in existing safeguards; and regularly monitor the effectiveness of our safeguards. Primary responsibility for assessing, monitoring and managing our cybersecurity risks rests with our Chief Executive Officer and Chief Financial Officer who manage the risk assessment and mitigation process.

We engage consultants, or other third parties in connection with our risk assessment processes. These service providers assist us to design and implement our cybersecurity policies and procedures, as well as to monitor and test our safeguards. We require each third-party service provider to certify that it has the ability to implement and maintain appropriate security measures, consistent with all applicable laws, to implement and maintain reasonable security measures in connection with their work with us, and to promptly report any suspected breach of its security measures that may affect our company.

We have not encountered cybersecurity challenges that have materially impaired our operations or financial standing.

Governance

Our Board addresses the Company’s cybersecurity risk management as part of its general oversight function. The Board’ audit committee is responsible for overseeing Company’s cybersecurity risk management processes, including oversight and mitigation of risks from cybersecurity threats. We maintain a cybersecurity risk management program designed to identify, assess, and manage material risks from cybersecurity threats to our information systems and the digital assets and data we handle. Our program includes periodic risk assessments, control implementation, testing, and incident response processes, and it isintegrated with our broader enterprise risk management framework.

Assessment and mitigation. We conduct periodic and event-driven risk assessments to identify reasonably foreseeable internal and external cybersecurity risks. Following these assessments, we implement and maintain safeguards designed to minimize identified risks and remediate gaps, including multi-factor authentication, privileged access management, network segmentation, endpoint protection, vulnerability scanning, and patch management. For digital asset-related operations, we emphasize multi-party key controls, segregation of duties, and monitoring of validator performance and custody providers.

Third-party risk management. We rely on certain third-party service providers, including custodians, cloud and data center providers, staking/validator services, and other vendors. We assess relevant providers’ security controls during onboarding and periodically thereafter, including certifications, audit reports, incident history, and contractual commitments to notify us of security incidents that may affect our company. We incorporate cybersecurity requirements into applicable contracts.

Governance. Our Board oversees cybersecurity risk as part of its overall risk oversight. The Audit Committee receives regular briefings on cybersecurity threats, risk assessments, and mitigation activities from management. Our Chief Executive Officer and Chief Financial Officer are responsible for implementing our cybersecurity risk management program and for coordinating incident response. Management reviews significant cybersecurity assessments and reports, allocates budgets, and approves security priorities.

Incidents. To date, we havenot experienced cybersecurity incidents that have materially affected our business strategy, results of operations, or financial condition. We maintain processes to timely escalate incidents to management and the Audit Committee where appropriate, and to evaluate whether any incident is material. If we determine that a cybersecurity incident is material, we will make required disclosures consistent with applicable SEC rules.