Skip to main content

Coinbase Global, Inc.

For the period ended Jun 30, 2025. Filed Jul 31, 2025.

View on SEC.gov

About this filing

A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.

Jun 30, 2025 · Filed Jul 31, 2025

COIN$136.10+1.0%Stored close · as of Nov 9, 2026

What changed in Risk Factors?

Read the current filing

Previous report: 10-Q

Period ended 2025-03-31; filed 2025-05-08.

0001679788-25-000089

Item 1A. Risk Factors

Current report: 10-Q

Period ended 2025-06-30; filed 2025-07-31.

0001679788-25-000154

Item 1A. Risk Factors

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 472 previous paragraphs and 472 current paragraphs.

442 unchanged; 27 reworded; 2 added; 2 removed; 1 previous and 1 current paragraphs rearranged.

Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Added paragraphs (2)

Current report

•fluctuations in the market values of our strategic investments;

Current report

For example, as previously disclosed on a Current Report on Form 8-K filed with the SEC on May 15, 2025, a threat actor improperly obtained information about certain customer accounts and internal documentation, and used that information for social-engineering attempts. No passwords or private keys were compromised as a result of this incident. Our investigation of this incident remains ongoing and we continue to face risks related to this incident, including harm to our reputation, governmental investigations and regulatory scrutiny, and ongoing litigation.
Removed paragraphs (2)

Previous report

For example, in 2021, third parties independently obtained login credentials and personal information for at least 6,000 customers and used those credentials to exploit a vulnerability that previously existed in the account recovery process. We reimbursed impacted customers approximately $25.1 million.

Previous report

Some open source licenses contain requirements that we make available source code for modifications or derivative works we create based upon the type of open source software we use, or grant other licenses to our intellectual property. If we combine our proprietary software with open source software in a certain manner, we could, under certain open source licenses, be required to release the source code of our proprietary software to the public. This would allow our competitors to create similar offerings with lower development effort and time and ultimately could result in a loss of our competitive advantages. Alternatively, to avoid the public release of the affected portions of our source code, we could be required to expend substantial time and resources to re-engineer some or all of our software.
Reworded paragraphs (27)

Previous wording

While we support a diverse portfolio of crypto assets for trading, staking and custody, our net revenue is concentrated in a limited number of areas, such as transactions in Bitcoin and Ethereum for transaction revenue and stablecoin revenue in connection with USDC for subscription and services revenue. For the three months ended March 31, 2025 and the year ended December 31, 2024, we derived a meaningful amount of our net revenue from transaction fees generated in connection with the trading of Bitcoin and Ethereum; these trading pairs drove approximately 38% and 44% of total Trading Volume on our platform during these periods, respectively. In addition to the factors impacting the broader cryptoeconomy described in this section, our revenue may be adversely affected if the markets for Bitcoin and Ethereum deteriorate or if their prices decline, including as a result of the following factors:

Current wording

While we support a diverse portfolio of crypto assets for trading, staking and custody, our net revenue is concentrated in a limited number of areas, such as transactions in Bitcoin and Ethereum for transaction revenue and stablecoin revenue in connection with USDC for subscription and services revenue. For the six months ended June 30, 2025 and the year ended December 31, 2024, we derived a meaningful amount of our net revenue from transaction fees generated in connection with the trading of Bitcoin and Ethereum; these trading pairs drove approximately 41% and 44% of total Trading Volume on our platform during these periods, respectively. In addition to the factors impacting the broader cryptoeconomy described in this section, our revenue may be adversely affected if the markets for Bitcoin and Ethereum deteriorate or if their prices decline, including as a result of the following factors:

Previous wording

•the governance of many decentralized blockchain networks, including L2 blockchains like Base, is by voluntary consensus and open competition, and many developers are not directly compensated for their contributions. As a result, there may be a lack of consensus or clarity on the governance of any particular crypto network, a lack of incentives for developers to maintain or develop the network, and other unforeseen issues, any of which could result in unexpected or undesirable errors, bugs, or changes, or stymie such network’s utility and ability to respond to challenges and grow; and

Current wording

•the governance of many decentralized blockchain networks, including L2 blockchains like Base Chain (formerly Base), is by voluntary consensus and open competition, and many developers are not directly compensated for their contributions. As a result, there may be a lack of consensus or clarity on the governance of any particular crypto network, a lack of incentives for developers to maintain or develop the network, and other unforeseen issues, any of which could result in unexpected or undesirable errors, bugs, or changes, or stymie such network’s utility and ability to respond to challenges and grow; and

Previous wording

Governmental and regulatory bodies, including in the United States, may introduce new policies, laws, and regulations relating to crypto assets and the cryptoeconomy generally, and crypto asset platforms in particular. Other companies’ failures of risk management and other control functions, including those that played a role in the 2022 Events, could contribute to stricter oversight of crypto asset platforms and the cryptoeconomy. Furthermore, new interpretations of existing laws and regulations may be issued by such bodies or the judiciary, which may adversely impact the development of the cryptoeconomy as a whole and our legal and regulatory status in particular by changing how we operate our business, how our products and services are regulated, and what products or services we and our competitors can offer, requiring changes to our compliance and risk mitigation measures, imposing new licensing requirements, or imposing a total ban on certain crypto asset transactions, as has occurred in certain jurisdictions in the past. For example, in April 2023, the SEC reopened a comment period for amendments to Rule 3b-16 under the Securities Exchange Act of 1934, as amended (the “Exchange Act”), that could subject several cryptoeconomy participants and systems to registration or other operational compliance requirements under the Exchange Act. If the SEC’s proposed amendment is adopted in its current form, we, along with other cryptoeconomy participants, could face significant additional uncertainty and risk of increased operational costs. In November 2023, the New York Department of Financial Services (“NYDFS”) adopted guidance regarding the policies and procedures required for virtual currency business entities licensed in New York, such as Coinbase, Inc. This guidance and other applicable state law guidance regarding virtual currency business activity could result in changes to our business in such states as well as the risk of increased operational costs and the risk of enforcement actions. If we are unable to comply with any new requirements, our ability to offer our products and services in their current form may be adversely affected. Additionally, under recommendations from the Financial Crimes Enforcement Network (“FinCEN”), and the Financial Action Task Force, the United States and several foreign jurisdictions have or are likely to impose the Funds Transfer Rule (commonly referred to as the Travel Rule) on financial service providers in the cryptoeconomy. We may face substantial costs to operationalize and comply with the Travel Rule and may be further subject to administrative sanctions for technical violations or customer attrition if the user experience suffers as a result. In October 2023, FinCEN released a proposed rule that identifies virtual currency “mixing” as a class of transactions of primary money laundering concern and imposes heightened recordkeeping and reporting obligations for financial institutions with respect to those tr…

Excerpt shortened here; the source contains the full paragraph.

Current wording

Governmental and regulatory bodies, including in the United States, may introduce new policies, laws, and regulations relating to crypto assets and the cryptoeconomy generally, and crypto asset platforms in particular. Other companies’ failures of risk management and other control functions, including those that played a role in the 2022 Events, could contribute to stricter oversight of crypto asset platforms and the cryptoeconomy. Furthermore, new interpretations of existing laws and regulations may be issued by such bodies or the judiciary, which may adversely impact the development of the cryptoeconomy as a whole and our legal and regulatory status in particular by changing how we operate our business, how our products and services are regulated, and what products or services we and our competitors can offer, requiring changes to our compliance and risk mitigation measures, imposing new licensing requirements, or imposing a total ban on certain crypto asset transactions, as has occurred in certain jurisdictions in the past. In November 2023, the New York Department of Financial Services (“NYDFS”) adopted guidance regarding the policies and procedures required for virtual currency business entities licensed in New York, such as Coinbase, Inc. This guidance and other applicable state law guidance regarding virtual currency business activity could result in changes to our business in such states as well as the risk of increased operational costs and the risk of enforcement actions. If we are unable to comply with any new requirements, our ability to offer our products and services in their current form may be adversely affected. Additionally, under recommendations from the Financial Crimes Enforcement Network (“FinCEN”), and the Financial Action Task Force, the United States and several foreign jurisdictions have or are likely to impose the Funds Transfer Rule (commonly referred to as the Travel Rule) on financial service providers in the cryptoeconomy. We may face substantial costs to operationalize and comply with the Travel Rule and may be further subject to administrative sanctions for technical violations or customer attrition if the user experience suffers as a result. In October 2023, FinCEN released a proposed rule that identifies virtual currency “mixing” as a class of transactions of primary money laundering concern and imposes heightened recordkeeping and reporting obligations for financial institutions with respect to those transactions. There are substantial uncertainties regarding the scope of these requirements in practice, and we may face substantial costs to operationalize and comply with these rules.

Previous wording

We may be further subject to administrative sanctions for technical violations or customer attrition if the user experience suffers as a result. As another example, the extension of anti-money laundering requirements to certain crypto-related activities by the European Union’s Fifth Money Laundering Directive, as updated by the European Union’s Sixth Money Laundering Directive, has increased the regulatory compliance burden for our business in Europe and, as a result of the fragmented approach to the implementation of its provisions, resulted in distinct and divergent national licensing and registration regimes for us in different E.U. member states. Further E.U.-level legislation imposing additional regulatory requirements in relation to crypto-related activities is also expected in the near term, such as with the effectiveness of the Markets in Crypto-Assets Regulation (“MiCA”). Among other provisions, MiCA introduces a comprehensive authorization and compliance regime for crypto asset service providers and a disclosure regime for the issuers of certain crypto assets, which will impact our operations in the European Union, including through localization requirements.

Current wording

We may be further subject to administrative sanctions for technical violations or customer attrition if the user experience suffers as a result. As another example, the extension of anti-money laundering requirements to certain crypto-related activities by the European Union’s Fifth Money Laundering Directive has increased the regulatory compliance burden for our business in Europe and, as a result of the fragmented approach to the implementation of its provisions, resulted in distinct and divergent national licensing and registration regimes for us in different E.U. member states. Additionally, the Markets in Crypto-Assets Regulation (“MiCA”) introduces a comprehensive authorization and compliance regime for crypto asset service providers and a disclosure regime for the issuers of certain crypto assets, which will impact our operations in the European Union, including through localization requirements, due to the obligations associated with our MiCA license (obtained in June 2025).

Previous wording

Because we have offered and will continue to offer a variety of innovative products and services to our customers, many of our offerings are subject to significant regulatory uncertainty and we from time to time face regulatory inquiries regarding our current and planned products. For instance, we purchase USDC, a stablecoin redeemable on a one-to-one basis for U.S. dollars, from Circle and sell it to customers on our platform. The regulatory treatment of fiat-backed stablecoins is highly uncertain and has drawn significant attention from legislative and regulatory bodies around the world. The issuance, purchase, and sale of such stablecoins may implicate a variety of banking, deposit, money transmission, prepaid access and stored value, anti-money laundering, commodities, securities, sanctions, and other laws and regulations in the United States and in other jurisdictions. There are substantial uncertainties as to how these requirements would apply in practice, and we may face substantial compliance costs to operationalize and comply with these rules. Certain products and services offered by us that we believe are not subject to regulatory oversight, or are only subject to certain regulatory regimes, such as Coinbase Wallet, a standalone mobile application that allows customers to manage their own private keys and store their crypto assets directly on their mobile devices, may cause us to be deemed to be engaged in a form of regulated activity for which licensure is required or cause us to become subject to new and additional forms of regulatory oversight. We also offer various staking, rewards, and lending products, all of which are subject to significant regulatory uncertainty, and could implicate a variety of laws and regulations worldwide. For example, there is regulatory uncertainty regarding the status of our staking, lending, rewards, and other yield-generating activities under the U.S. federal and state securities laws. While we have implemented policies and procedures, including geofencing for certain products and services, designed to help monitor for and ensure compliance with existing and new laws and regulations, there can be no assurance that we and our employees, contractors, and agents will not violate or otherwise fail to comply with such laws and regulations. To the extent that we or our employees, contractors, or agents are deemed or alleged to have violated or failed to comply with any laws or regulations, including related interpretations, orders, determinations, directives, or guidance, we or they could be subject to a litany of civil, criminal, and administrative fines, penalties, orders and actions, including being required to suspend or terminate the offering of certain products and services. Moreover, to the extent our customers nevertheless access our platform, products or services outside of jurisdictions where we have obtained required governmental licenses and authorization, we could similarly be subject to a variet…

Excerpt shortened here; the source contains the full paragraph.

Current wording

Because we have offered and will continue to offer a variety of innovative products and services to our customers, many of our offerings are subject to significant regulatory uncertainty and we from time to time face regulatory inquiries regarding our current and planned products. For instance, we purchase USDC, a stablecoin redeemable on a one-to-one basis for U.S. dollars, from Circle and sell it to customers on our platform. The regulatory treatment of fiat-backed stablecoins is highly uncertain and has drawn significant attention from legislative and regulatory bodies around the world. The issuance, purchase, and sale of such stablecoins may implicate a variety of banking, deposit, money transmission, prepaid access and stored value, anti-money laundering, commodities, securities, sanctions, and other laws and regulations in the United States and in other jurisdictions. There are substantial uncertainties as to how these requirements would apply in practice, and we may face substantial compliance costs to operationalize and comply with these rules. Certain products and services offered by us that we believe are not subject to regulatory oversight, or are only subject to certain regulatory regimes, such as the Base App (formerly Coinbase Wallet), a standalone mobile application that allows customers to manage their own private keys and store their crypto assets directly on their mobile devices, may cause us to be deemed to be engaged in a form of regulated activity for which licensure is required or cause us to become subject to new and additional forms of regulatory oversight. We also offer various staking, rewards, and lending products, all of which are subject to significant regulatory uncertainty, and could implicate a variety of laws and regulations worldwide. For example, there is regulatory uncertainty regarding the status of our staking, lending, rewards, and other yield-generating activities under the U.S. federal and state securities laws. While we have implemented policies and procedures, including geofencing for certain products and services, designed to help monitor for and ensure compliance with existing and new laws and regulations, there can be no assurance that we and our employees, contractors, and agents will not violate or otherwise fail to comply with such laws and regulations. To the extent that we or our employees, contractors, or agents are deemed or alleged to have violated or failed to comply with any laws or regulations, including related interpretations, orders, determinations, directives, or guidance, we or they could be subject to a litany of civil, criminal, and administrative fines, penalties, orders and actions, including being required to suspend or terminate the offering of certain products and services. Moreover, to the extent our customers nevertheless access our platform, products or services outside of jurisdictions where we have obtained required governmental licenses and authorization, we could similarl…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

We compete against an increasing number of decentralized and noncustodial platforms. On these platforms, users can interact directly with a market-making smart contract or onchain trading mechanism to earn crypto assets or to exchange one type of crypto asset for another without any centralized intermediary. We have seen increased interest in certain decentralized platforms with transaction volumes rivaling our own platform on multiple occasions, and expect interest in decentralized and noncustodial platforms to grow further as the industry develops. If the demand for decentralized platforms grows and we are unable to compete with these decentralized and noncustodial platforms, including, for example, if we fail to achieve sufficient decentralization and scaling of Base as an L2, our business, operating results, and financial condition could be adversely affected.

Current wording

We compete against an increasing number of decentralized and noncustodial platforms. On these platforms, users can interact directly with a market-making smart contract or onchain trading mechanism to earn crypto assets or to exchange one type of crypto asset for another without any centralized intermediary. We have seen increased interest in certain decentralized platforms with transaction volumes rivaling our own platform on multiple occasions, and expect interest in decentralized and noncustodial platforms to grow further as the industry develops. If the demand for decentralized platforms grows and we are unable to compete with these decentralized and noncustodial platforms, including, for example, if we fail to achieve sufficient decentralization and scaling of Base Chain (formerly Base) as an L2, our business, operating results, and financial condition could be adversely affected.

Previous wording

We are, and may continue to be, subject to material litigation, including individual and class action lawsuits, as well as investigations and enforcement actions by regulators and governmental authorities. These matters are often expensive and time consuming, and, if resolved adversely, could adversely affect our business, operating results, and financial condition.

Current wording

We are, and may continue to be, subject to litigation, including individual and class action lawsuits, as well as investigations and enforcement actions by regulators and governmental authorities. These matters are often expensive and time consuming, and, if resolved adversely, could adversely affect our business, operating results, and financial condition.

Previous wording

We have been, currently are, and may from time to time become subject to claims, arbitrations, individual and class action lawsuits with respect to a variety of matters, including employment, consumer protection, advertising, and securities. In addition, we have been, currently are, and may from time to time become subject to, government and regulatory investigations, inquiries, actions or requests, other proceedings and enforcement actions alleging violations of laws, rules, and regulations, both foreign and domestic. For a description of such material litigation, regulatory investigations, and other proceedings, see Note 16. Commitments and Contingencies of the Notes to our Condensed Consolidated Financial Statements included in Part I, Item 1 of this Quarterly Report on Form 10-Q. The scope, determination, and impact of claims, lawsuits, government and regulatory investigations, enforcement actions, disputes, and proceedings to which we are subject cannot be predicted with certainty and may result in:

Current wording

We have been, currently are, and may from time to time become subject to claims, arbitrations, individual and class action lawsuits with respect to a variety of matters, including employment, consumer protection, intellectual property, privacy, information security, data protection, advertising, and securities. In addition, we have been, currently are, and may from time to time become subject to, government and regulatory investigations, inquiries, actions or requests, other proceedings and enforcement actions alleging violations of laws, rules, and regulations, both foreign and domestic. For a description of our material litigation, regulatory investigations, and other proceedings, see Note 16. Commitments and Contingencies of the Notes to our Condensed Consolidated Financial Statements included in Part I, Item 1 of this Quarterly Report on Form 10-Q. The scope, determination, and impact of claims, lawsuits, government and regulatory investigations, enforcement actions, disputes, and proceedings to which we are subject cannot be predicted with certainty and may result in:

Previous wording

The SEC’s Strategic Hub for Innovation and Financial Technology published a framework for analyzing whether any given crypto asset is a security in April 2019. The SEC has also brought enforcement actions and entered into settlements with numerous cryptoeconomy participants alleging that certain digital assets are securities. More recently, the SEC dismissed many of those enforcement actions. These statements, framework and enforcement actions are not rules or regulations of the SEC and are not binding on the SEC. As noted above, whether any given crypto asset, product or service would be ultimately deemed by a federal court to be a security is uncertain and difficult to predict. Moreover, the SEC and the Commodities Futures Trading Commission (the “CFTC”) and their senior officials have, at times, taken conflicting positions in speeches and enforcement actions as to whether a particular crypto asset is a security or commodity.

Current wording

The SEC has also brought enforcement actions and entered into settlements with numerous cryptoeconomy participants alleging that certain digital assets are securities. More recently, the SEC dismissed many of those enforcement actions. These statements, framework and enforcement actions are not rules or regulations of the SEC and are not binding on the SEC. As noted above, whether any given crypto asset, product or service would be ultimately deemed by a federal court to be a security is uncertain and difficult to predict. Moreover, the SEC and the Commodities Futures Trading Commission (the “CFTC”) and their senior officials have, at times, taken conflicting positions in speeches and enforcement actions as to whether a particular crypto asset is a security or commodity. In January 2025, the SEC launched a crypto task force dedicated to developing a comprehensive and clear regulatory framework for crypto assets. While newly formed, its goal is to clarify federal securities laws for crypto, recommend practical policies, foster innovation, and protect investors.

Previous wording

Further, if Bitcoin, Ethereum, stablecoins or any other supported crypto asset is deemed to be a security under any U.S. federal, state, or foreign jurisdiction, or in a proceeding in a court of law or otherwise, it may have adverse consequences for such supported crypto asset. For instance, all transactions in such supported crypto asset would have to be registered with the SEC or other foreign authority, or conducted in accordance with an exemption from registration, which could severely limit its liquidity, usability and transactability. Moreover, the networks on which such supported crypto assets are utilized may be required to be regulated as securities intermediaries, and subject to applicable rules, which could effectively render the network impracticable for its existing purposes. Further, it could draw negative publicity and a decline in the general acceptance of the crypto asset. Also, it may make it difficult for such supported crypto asset to be traded, cleared, and custodied as compared to other crypto assets that are not considered to be securities. Specifically, even if transactions in such supported crypto asset were registered with the SEC or conducted in accordance with an exemption from registration, the current intermediary-based framework for securities trading, clearance and settlement is not consistent with the operations of the crypto asset market. For example, under current SEC guidance, securities involving crypto assets cannot be held on behalf of customers by broker-dealers that also support custody of traditional securities; and the SEC has not permitted public permissionless blockchain-based clearance and settlement systems for securities.

Current wording

Further, if Bitcoin, Ethereum, stablecoins or any other supported crypto asset is deemed to be a security under any U.S. federal, state, or foreign jurisdiction, or in a proceeding in a court of law or otherwise, it may have adverse consequences for such supported crypto asset. For instance, all transactions in such supported crypto asset would have to be registered with the SEC or other foreign authority, or conducted in accordance with an exemption from registration, which could severely limit its liquidity, usability and transactability. Moreover, the networks on which such supported crypto assets are utilized may be required to be regulated as securities intermediaries, and subject to applicable rules, which could effectively render the network impracticable for its existing purposes. Further, it could draw negative publicity and a decline in the general acceptance of the crypto asset. Also, it may make it difficult for such supported crypto asset to be traded, cleared, and custodied as compared to other crypto assets that are not considered to be securities. Specifically, even if transactions in such supported crypto asset were registered with the SEC or conducted in accordance with an exemption from registration, the current intermediary-based framework for securities trading, clearance and settlement is not consistent with the operations of the crypto asset market. For example, the SEC has not permitted public permissionless blockchain-based clearance and settlement systems for securities.

Previous wording

Our products, services and educational offerings incorporate a holistic, customer-centric set of digital engagement practices, including educational content and notifications, which are designed, in part, to promote financial literacy and awareness and to provide customers with guidance and information to help them make better informed decisions about their crypto activity. Certain jurisdictions have proposed or are considering laws and regulations regarding conflicts of interest associated with the use of predictive data analytics, digital engagement practices, and similar technologies by broker-dealers, investment advisers and/or other securities market participants. For example, in July 2023 the SEC proposed rules (the “July 2023 Rule Proposals”) that would impose new obligations on broker-dealers and investment advisers registered, or required to be registered, with the SEC with respect to conflicts of interest associated with the use of predictive data analytics and similar technologies when interacting with investors. We do not believe that the July 2023 Rule Proposals, if adopted as proposed, would apply to our business. If the July 2023 Rule Proposals were to be adopted (as proposed or otherwise) and found to apply to our business, or if similar rules were to be adopted and found to apply to our business in any other jurisdiction in which we operate, we may be required to modify, limit, or discontinue our use of certain technologies and features used in connection with our products and services and/or to change the way that we interact with existing and prospective customers. The adoption of such laws or regulations in the jurisdictions in which we operate could, if they are deemed to apply to our business, adversely affect our business, operating results, and financial condition.

Current wording

Our products, services and educational offerings incorporate a holistic, customer-centric set of digital engagement practices, including educational content and notifications, which are designed, in part, to promote financial literacy and awareness and to provide customers with guidance and information to help them make better informed decisions about their crypto activity. Certain jurisdictions have proposed or are considering laws and regulations regarding conflicts of interest associated with the use of predictive data analytics, digital engagement practices, and similar technologies by broker-dealers, investment advisers and/or other securities market participants. If adopted and found to apply to our business, such laws or regulations may impose obligations on us that may require us to modify, limit, or discontinue our use of certain technologies and features used in connection with our products and services and/or to change the way that we interact with existing and prospective customers, which could adversely affect our business, operating results, and financial condition.

Previous wording

Bitcoin and other crypto assets, which have experienced significant fluctuations, the amount of liquidity in the markets, and other factors. Borrowers may seek protection under federal bankruptcy law or similar laws. If a borrower of a loan files for bankruptcy (or becomes the subject of an involuntary petition), a stay may go into effect that will automatically put any pending collection actions on the loan on hold and prevent further collection action absent bankruptcy court approval. The efficacy of our security interest in customer collateral is not guaranteed under applicable state law or the Uniform Commercial Code and therefore we may be exposed to loss in the event of a customer default, even if we appear to be secured against such default. While we have not incurred any material losses to date, if any of the foregoing events were to occur, our reputation and relationships with borrowers, and our financial results, could be harmed. We intend to continue to explore other products, models, and structures for offering commercial financing, and other forms of credit and loan products. Some of those models or structures may require, or be deemed to require, additional data, procedures, partnerships, licenses, regulatory approvals, or capabilities that we have not yet obtained or developed.

Current wording

Borrower loan loss rates may be significantly affected by economic downturns or general economic conditions beyond our control and beyond the control of individual borrowers. In particular, loss rates on loans may increase due to factors such as prevailing market conditions in the cryptoeconomy, the price of Bitcoin and other crypto assets, which have experienced significant fluctuations, the amount of liquidity in the markets, and other factors. Borrowers may seek protection under federal bankruptcy law or similar laws. If a borrower of a loan files for bankruptcy (or becomes the subject of an involuntary petition), a stay may go into effect that will automatically put any pending collection actions on the loan on hold and prevent further collection action absent bankruptcy court approval. The efficacy of our security interest in customer collateral is not guaranteed under applicable state law or the Uniform Commercial Code and therefore we may be exposed to loss in the event of a customer default, even if we appear to be secured against such default. While we have not incurred any material losses to date, if any of the foregoing events were to occur, our reputation and relationships with borrowers, and our financial results, could be harmed. We intend to continue to explore other products, models, and structures for offering commercial financing, and other forms of credit and loan products. Some of those models or structures may require, or be deemed to require, additional data, procedures, partnerships, licenses, regulatory approvals, or capabilities that we have not yet obtained or developed.

Previous wording

Our key business metrics may also be impacted by compliance or fraud-related bans, technical incidents, or false or spam accounts in existence on our platform. We regularly deactivate fraudulent and spam accounts that violate our terms of service, and exclude these users from the calculation of our key business metrics; however, we may not succeed in identifying and removing all such accounts from our platform. Additionally, users are not prohibited from having more than one account and our MTUs metric may overstate the number of unique customers who have registered an account on our platform as one customer may register for, and use, multiple accounts with different email addresses, phone numbers, or usernames. Furthermore, MTUs may overstate the number of unique consumers due to differences in product architecture or user behavior, which may cause MTUs to fluctuate. For example, a user may currently have a Coinbase Wallet account that is unlinked to their registered account on our platform, but then choose to link these accounts in the future as our product offerings evolve. To the extent that the user had activity in both their Wallet and their registered account in the measurement period, what was previously captured as two unique MTUs would now be counted as a single MTU. If MTUs or our other key business metrics provide us with incorrect or incomplete information about users and their behavior, we may make inaccurate conclusions about our business.

Current wording

Our key business metrics may also be impacted by compliance or fraud-related bans, technical incidents, or false or spam accounts in existence on our platform. We regularly deactivate fraudulent and spam accounts that violate our terms of service, and exclude these users from the calculation of our key business metrics; however, we may not succeed in identifying and removing all such accounts from our platform. Additionally, users are not prohibited from having more than one account and our MTUs metric may overstate the number of unique customers who have registered an account on our platform as one customer may register for, and use, multiple accounts with different email addresses, phone numbers, or usernames. Furthermore, MTUs may overstate the number of unique consumers due to differences in product architecture or user behavior, which may cause MTUs to fluctuate. For example, a user may currently have an account on the Base App (formerly Coinbase Wallet) that is unlinked to their registered account on our platform, but then choose to link these accounts in the future as our product offerings evolve. To the extent that the user had activity in both their Wallet and their registered account in the measurement period, what was previously captured as two unique MTUs would now be counted as a single MTU. If MTUs or our other key business metrics provide us with incorrect or incomplete information about users and their behavior, we may make inaccurate conclusions about our business.

Previous wording

Moreover, while fiat currencies can be used to facilitate illegal activities, crypto assets are relatively new and, in many jurisdictions, may be lightly regulated or largely unregulated. Many types of crypto assets have characteristics, such as the speed with which digital currency transactions can be conducted, the ability to conduct transactions without the involvement of regulated intermediaries, the ability to engage in transactions across multiple jurisdictions, the irreversible nature of certain crypto asset transactions, and encryption technology that anonymizes these transactions, that make crypto assets susceptible to use in illegal activity. U.S. federal and state and foreign regulatory authorities and law enforcement agencies, such as the Department of Justice, SEC, CFTC, FTC, or the Internal Revenue Service (“IRS”), and various state securities and financial regulators have taken and continue to take legal action against persons and entities alleged to be engaged in fraudulent schemes or other illicit activity involving crypto assets. We also support crypto assets that incorporate privacy-enhancing features, and may from time to time support additional crypto assets with similar functionalities. These privacy-enhancing crypto assets obscure the identities of sender and receiver, and may prevent law enforcement officials from tracing the source of funds on the blockchain. Facilitating transactions in these crypto assets may cause us to be at increased risk of liability arising out of anti-money laundering and economic sanctions laws and regulations.

Current wording

Moreover, while fiat currencies can be used to facilitate illegal activities, crypto assets are relatively new and, in many jurisdictions, may be lightly regulated or largely unregulated. Many types of crypto assets have characteristics, such as the speed with which digital currency transactions can be conducted, the ability to conduct transactions without the involvement of regulated intermediaries, the ability to engage in transactions across multiple jurisdictions, the irreversible nature of certain crypto asset transactions, and encryption technology that anonymizes these transactions, that make crypto assets susceptible to use in illegal activity. U.S. federal and state and foreign regulatory authorities and law enforcement agencies, such as the Department of Justice, SEC, CFTC, FTC, or the Internal Revenue

Previous wording

While we believe that our risk management and compliance framework is designed to detect significant illicit activities conducted by our potential or existing customers, we cannot ensure that we will be able to detect all illegal activity on our platform. Base, an open source permissionless L2 protocol built on the Ethereum blockchain developed by us, has been in the past, and may in the future, be a target for scam tokens or other illegal activity. For example, in August 2023, a number of fraudulent tokens were identified and traded on Base blockchain. As we continue to develop Base, and in light of this fraudulent activity, we continue to invest in improving our security processes, including through our in-house blockchain monitoring capabilities, third-party tools for identifying malicious and out of pattern events, and the monitoring of contract source code and bytecode on Base against a database of known scam code patterns. While to date, such illegal or fraudulent activity on Base has not had a material impact on our business, operating results, financial condition, or cash flows, future illegal activity could adversely affect our business, operating results, financial condition or cash flows and our efforts to identify and remedy such illegal or fraudulent activity may not be successful. If our platform is used to further such illegal activities, our business, operating results, and financial condition could be adversely affected.

Current wording

While we believe that our risk management and compliance framework is designed to detect significant illicit activities conducted by our potential or existing customers, we cannot ensure that we will be able to detect all illegal activity on our platform. Base Chain (formerly Base), an open source permissionless L2 protocol built on the Ethereum blockchain developed by us, has been in the past, and may in the future, be a target for scam tokens or other illegal activity. For example, in August 2023, a number of fraudulent tokens were identified and traded on Base Chain blockchain. As we continue to develop Base Chain, and in light of this fraudulent activity, we continue to invest in improving our security processes, including through our in-house blockchain monitoring capabilities, third-party tools for identifying malicious and out of pattern events, and the monitoring of contract source code and bytecode on Base Chain against a database of known scam code patterns. While to date, such illegal or fraudulent activity on Base Chain has not had a material impact on our business, operating results, financial condition, or cash flows, future illegal activity could adversely affect our business, operating results, financial condition or cash flows and our efforts to identify and remedy such illegal or fraudulent activity may not be successful. If our platform is used to further such illegal activities, our business, operating results, and financial condition could be adversely affected.

Previous wording

The accounting rules and regulations that we must comply with are complex and subject to interpretation by the Financial Accounting Standards Board (the “FASB”), the SEC, and various other bodies formed to promulgate and interpret appropriate accounting principles. Recent actions and public comments from the FASB and the SEC have focused on the integrity of financial reporting and internal controls and many companies’ accounting policies are being subjected to heightened scrutiny by regulators and the public. Further, there has been limited precedent for the financial accounting of crypto assets and related valuation and revenue recognition. Moreover, a change in these principles or interpretations could have a significant effect on our reported financial results, and may even affect the reporting of transactions completed before the announcement or effectiveness of a change. For example, in December 2023, the FASB issued Accounting Standards Update No. 2023-08, Intangibles—Goodwill and Other—Crypto Assets (ASU 2023-08): Accounting for and Disclosure of Crypto Assets (“ASU 2023-08”), which represents a significant change in how entities that hold crypto assets will account for certain of those holdings. Previously, crypto assets held were accounted for as intangible assets with indefinite useful lives, which required us to measure crypto assets at cost less impairment. Effective as of January 1, 2024, we adopted ASU 2023-08, which requires us to measure crypto assets held at fair value at each reporting date, with fair value gains and losses recognized through Net income (loss). Fair value gains and losses can increase the volatility of our net income, especially if the underlying crypto asset market is volatile. Additionally, on March 31, 2022, the staff of the SEC issued Staff Accounting Bulletin (“SAB”) No. 121 (“SAB 121”), which represented a significant change regarding how a company safeguarding crypto assets held for its platform users reports such crypto assets on its balance sheet and required retrospective application as of January 1, 2022. In January 2025, the staff of the SEC issued SAB No. 122 (“SAB 122”), which rescinds the previously-issued interpretive guidance included within SAB 121. We have adopted SAB 122 as of December 31, 2024 on a retrospective basis.

Current wording

The accounting rules and regulations that we must comply with are complex and subject to interpretation by the Financial Accounting Standards Board (the “FASB”), the SEC, and various other bodies formed to promulgate and interpret appropriate accounting principles. Recent actions and public comments from the FASB and the SEC have focused on the integrity of financial reporting and internal controls and many companies’ accounting policies are being subjected to heightened scrutiny by regulators and the public. Further, there has been limited precedent for the financial accounting of crypto assets and related valuation and revenue recognition. Moreover, a change in these principles or interpretations could have a significant effect on our reported financial results, and may even affect the reporting of transactions completed before the announcement or effectiveness of a change. For example, in December 2023, the FASB issued Accounting Standards Update No. 2023-08, Intangibles—Goodwill and Other—Crypto Assets (ASU 2023-08): Accounting for and Disclosure of Crypto Assets (“ASU 2023-08”), which represents a significant change in how entities that hold crypto assets will account for certain of those holdings. Previously, crypto assets held were accounted for as intangible assets with indefinite useful lives, which required us to measure crypto assets at cost less impairment. Effective as of January 1, 2024, we adopted ASU 2023-08, which requires us to measure crypto assets held at fair value at each reporting date, with fair value gains and losses recognized through Net income. Fair value gains and losses can increase the volatility of our net income, especially if the underlying crypto asset market is volatile. Additionally, on March 31, 2022, the staff of the SEC issued Staff Accounting Bulletin (“SAB”) No. 121 (“SAB 121”), which represented a significant change regarding how a company safeguarding crypto assets held for its platform users reports such crypto assets on its balance sheet and required retrospective application as of January 1, 2022. In January 2025, the staff of the SEC issued SAB No. 122 (“SAB 122”), which rescinds the previously-issued interpretive guidance included within SAB 121. We have adopted SAB 122 as of December 31, 2024 on a retrospective basis.

Previous wording

As a financial institution licensed to, among other things, engage in money transmission in the United States, to conduct virtual currency business activity in New York, and issue electronic money in the United Kingdom and the European Union, we are subject to strict rules governing how we manage and hold customer fiat currency and crypto assets. We maintain complex treasury operations to manage and move customer fiat currency and crypto assets across our platforms and to comply with regulatory requirements. However, it is possible we may experience errors in fiat currency and crypto asset handling, accounting, and regulatory reporting that lead us to be out of compliance with these requirements. In addition, regulators may increase the amount of fiat currency reserves that we are required to maintain for our operations, as has happened in the past, which may lead to sanctions, penalties, changes to our business operations, or the revocation of licenses. Frequent launch of new products and services, margin trading, lending functions, and the addition of new payment rails increase these risks.

Current wording

As a financial institution licensed to, among other things, engage in money transmission in the United States, to conduct virtual currency business activity in New York, and issue electronic money in the United Kingdom and the European Union, we are subject to strict rules governing how we manage and hold customer fiat currency, stablecoins, and crypto assets. We maintain complex treasury operations to manage and move customer fiat currency and crypto assets across our platforms and to comply with regulatory requirements. However, it is possible we may experience errors in fiat currency and crypto asset handling, accounting, and regulatory reporting that lead us to be out of compliance with these requirements. In addition, regulators may increase the amount of capital reserves that we are required to maintain for our operations, as has happened in the past, which may lead to sanctions, penalties, changes to our business operations, or the revocation of licenses. Frequent launch of new products and services, margin trading, lending functions, and the addition of new payment rails increase these risks.

Previous wording

We have administrative, technical, and physical security measures and controls in place and maintain a robust information security program. However, our security measures, those of our vendors or service providers, or the security measures of companies we acquire, may be inadequate or breached as a result of third-party action, employee or service provider error, malfeasance, malware, phishing, hacking attacks, system error, trickery, advances in computer capabilities, new discoveries in the field of cryptography, inadequate facility security or otherwise, and, as a result, someone may be able to obtain unauthorized access to sensitive information, including personal data, on our systems. We could be the target of a cybersecurity incident, which could result in harm to our reputation and financial losses. Additionally, our customers have been and could be targeted in cybersecurity incidents like an account takeover, which could result in harm to our reputation and financial losses. For example, in 2021, third parties independently obtained login credentials and personal data for at least 6,000 customers and used those credentials to exploit a vulnerability that previously existed in the account recovery process. We reimbursed impacted customers approximately $25.1 million. Additionally, privacy and data protection laws are evolving, and these laws may be interpreted and applied in a manner that is inconsistent with our data handling safeguards and practices that could result in fines, lawsuits, and other penalties, and significant changes to our or our third-party partners’ business practices and products and service offerings.

Current wording

We have administrative, technical, and physical security measures and controls in place and maintain a robust information security program. However, our security measures, those of our vendors or service providers, or the security measures of companies we acquire, may be inadequate or breached as a result of third-party action, employee or service provider error, malfeasance, malware, phishing, hacking attacks, system error, trickery, advances in computer capabilities, new discoveries in the field of cryptography, inadequate facility security or otherwise, and, as a result, someone may be able to obtain unauthorized access to sensitive information, including personal data, on our systems. We could be the target of a cybersecurity incident, which could result in harm to our reputation and financial losses. Additionally, our customers have been and could be targeted in cybersecurity incidents like an account takeover, which could result in harm to our reputation and financial losses. For example, as previously disclosed on a Current Report on Form 8-K filed with the SEC on May 15, 2025, a threat actor improperly obtained information about certain customer accounts and internal documentation, and used that information for social-engineering attempts. No passwords or private keys were compromised as a result of this incident. Our investigation of this incident remains ongoing and we continue to face risks related to this incident, including harm to our reputation, governmental investigations and regulatory scrutiny, and ongoing litigation. Additionally, privacy and data protection laws are evolving, and these laws may be interpreted and applied in a manner that is inconsistent with our data handling safeguards and practices that could result in fines, lawsuits, and other penalties, and significant changes to our or our third-party partners’ business practices and products and service offerings.

Previous wording

We are subject to laws, regulations, and industry requirements related to data privacy, data protection and information security, and user protection across different markets where we conduct our business, including in the United States, European Economic Area (the “EEA”), and Asia-Pacific region, and industry requirements and such laws, regulations, and industry requirements are constantly evolving and changing. Any actual or perceived failure to comply with such laws, regulations, and industry requirements, or our privacy policies, could harm our business.

Current wording

We are subject to laws, regulations, and industry requirements related to data privacy, data protection and information security, and user protection across different markets where we conduct our business, including in the United States, European Economic Area (the “EEA”), and Asia-Pacific region, and such laws, regulations, and industry requirements are constantly evolving and changing. Any actual or perceived failure to comply with such laws, regulations, and industry requirements, or our privacy policies, could harm our business.

Previous wording

Additionally, many foreign countries and governmental bodies, including Australia, Brazil, Kenya, the European Union, India, Japan, Philippines, Indonesia, Singapore, United Kingdom, Switzerland, and numerous other jurisdictions in which we operate or conduct our business, have laws and regulations concerning the collection, use, processing, storage, and deletion of personal data obtained from their residents or by businesses operating within their jurisdiction. These laws and regulations often are more restrictive than those in the United States. Such laws and regulations may require companies to implement new privacy and security policies, permit individuals to access, correct, and delete personal data stored or maintained by such companies, inform individuals of security breaches that affect their personal data, require that certain types of data be retained on local servers within these jurisdictions, and, in some cases, obtain individuals’ affirmative opt-in consent to collect and use personal data for certain purposes.

Current wording

Additionally, many foreign countries and governmental bodies, including Australia, Brazil, Kenya, the European Union, India, Japan, Philippines, Indonesia, Singapore, United Kingdom, Switzerland, and numerous other jurisdictions in which we may operate or conduct our business, have laws and regulations concerning the collection, use, processing, storage, and deletion of personal data obtained from their residents or by businesses operating within their jurisdiction. These laws and regulations often are more restrictive than those in the United States. Such laws and regulations may require companies to implement new privacy and security policies, permit individuals to access, correct, and delete personal data stored or maintained by such companies, inform individuals of security breaches that affect their personal data, require that certain types of data be retained on local servers within these jurisdictions, and, in some cases, obtain individuals’ affirmative opt-in consent to collect and use personal data for certain purposes.

Previous wording

We are also subject to evolving E.U. privacy laws on cookies and e-marketing. In the European Union, regulators are increasingly focusing on compliance with requirements in the online behavioral advertising ecosystem, and an E.U. regulation known as the ePrivacy Regulation will significantly increase fines for non-compliance once in effect. In the European Union, informed consent, including a prohibition on pre-checked consents and a requirement to ensure separate consents for each cookie, is required for the placement of a cookie or similar technologies on a user’s device and for direct electronic marketing. As regulators start to enforce the strict approach in recent guidance, this could lead to substantial costs, require significant systems changes, limit the effectiveness of our marketing activities, divert the attention of our technology personnel, negatively impact our efforts to understand users, adversely affect our margins, increase costs, and subject us to additional liabilities.

Current wording

We are also subject to evolving privacy laws on cookies and e-marketing and online behavioral advertising. As regulators become increasingly focused on compliance, this could lead to substantial costs, require significant systems changes, limit the effectiveness of our marketing activities, divert the attention of our technology personnel, negatively impact our efforts to understand users, adversely affect our margins, increase costs, and subject us to additional liabilities.

Previous wording

We rely upon third-party platforms for the distribution of certain products and services. Our Coinbase and Coinbase Wallet apps are provided as free applications through both the Apple App Store and the Google Play Store, and are also accessible via mobile and traditional websites. The Google Play Store and Apple App Store are global application distribution platforms and the main distribution channels for our apps. As such, the promotion, distribution, and operation of our apps are subject to the respective platforms’ terms and policies for application developers, which are very broad and subject to frequent changes and re-interpretation. Further, these distribution platforms often contain restrictions related to crypto assets that are uncertain, broadly construed, and can limit the nature and scope of services that can be offered. For example, Apple App Store’s restrictions related to crypto assets have disrupted the proposed launch of many features within the Coinbase and Coinbase Wallet apps, including NFT transfer services and access to decentralized applications. If our products are found to be in violation of any such terms and conditions, we may no longer be able to offer our products through such third-party platforms. There can be no guarantee that third-party platforms will continue to support our product offerings, or that customers will be able to continue to use our products. For example, in November 2013, our iOS app was temporarily removed by Apple from the Apple App Store. In December 2019, we were similarly instructed by Apple to remove certain features relating to decentralized applications from our application to comply with the Apple App Store’s policies. Any changes, bugs, technical or regulatory issues with third-party platforms, our relationships with mobile manufacturers and carriers, or changes to their terms of service or policies could degrade our products’ functionalities, reduce or eliminate our ability to distribute our products, give preferential treatment to competitive products, limit our ability to deliver high quality offerings, or impose fees or other charges, any of which could affect our product usage and adversely affect our business, operating results, and financial condition.

Current wording

We rely upon third-party platforms for the distribution of certain products and services. Our Coinbase and the Base App (formerly Coinbase Wallet) apps are provided as free applications through both the Apple App Store and the Google Play Store, and are also accessible via mobile and traditional websites. The Google Play Store and Apple App Store are global application distribution platforms and the main distribution channels for our apps. As such, the promotion, distribution, and operation of our apps are subject to the respective platforms’ terms and policies for application developers, which are very broad and subject to frequent changes and re-interpretation. Further, these distribution platforms often contain restrictions related to crypto assets that are uncertain, broadly construed, and can limit the nature and scope of services that can be offered. For example, Apple App Store’s restrictions related to crypto assets have disrupted the proposed launch of many features within the Coinbase and the Base App apps, including NFT transfer services and access to decentralized applications. If our products are found to be in violation of any such terms and conditions, we may no longer be able to offer our products through such third-party platforms. There can be no guarantee that third-party platforms will continue to support our product offerings, or that customers will be able to continue to use our products. For example, in November 2013, our iOS app was temporarily removed by Apple from the Apple App Store. In December 2019, we were similarly instructed by Apple to remove certain features relating to decentralized applications from our application to comply with the Apple App Store’s policies. Any changes, bugs, technical or regulatory issues with third-party platforms, our relationships with mobile manufacturers and carriers, or changes to their terms of service or policies could degrade our products’ functionalities, reduce or eliminate our ability to distribute our products, give preferential treatment to competitive products, limit our ability to deliver high quality offerings, or impose fees or other charges, any of which could affect our product usage and adversely affect our business, operating results, and financial condition.

Previous wording

Employee or service provider misconduct or error could subject us to legal liability, financial losses, and regulatory sanctions and could seriously harm our reputation and negatively affect our business. Such misconduct could include engaging in improper or unauthorized transactions or activities, misappropriation of customer funds, insider trading and misappropriation of information, failing to supervise other employees or service providers, improperly using confidential information, as well as improper trading activity such as spoofing, layering, wash trading, manipulation and front-running. Employee or service provider errors, including mistakes in executing, recording, or processing transactions for customers, could expose us to the risk of material losses even if the errors are detected. Although we have implemented processes and procedures and provide trainings to our employees and service providers to reduce the likelihood of misconduct and error, these efforts may not be successful. Moreover, the risk of employee or service provider error or misconduct may be even greater for novel products and services and is compounded by the fact that many of our employees and service providers are accustomed to working at tech companies which generally do not maintain the same compliance customs and rules as financial services firms. This can lead to high risk of confusion among employees and service providers with respect to compliance obligations, particularly including confidentiality, data access, trading, and conflicts. It is not always possible to deter misconduct, and the precautions we take to prevent and detect this activity may not be effective in all cases. If we were found to have not met our regulatory oversight and compliance and other obligations, we could be subject to regulatory sanctions, financial penalties, restrictions on our activities for failure to properly identify, monitor and respond to potentially problematic activity and seriously damage our reputation. Our employees, contractors, and agents could also commit errors that subject us to financial claims for negligence, as well as regulatory actions, or result in financial liability. Further, allegations by regulatory or criminal authorities of improper trading activities could affect our brand and reputation.

Current wording

We have and may in the future experience employee or service provider misconduct. Employee or service provider misconduct or error could subject us to legal liability, financial losses, and regulatory sanctions and could seriously harm our reputation and negatively affect our business. Such misconduct could include engaging in improper or unauthorized transactions or activities, misappropriation of customer funds, insider trading and misappropriation of information, failing to supervise other employees or service providers, improperly using confidential information, as well as improper trading activity such as spoofing, layering, wash trading, manipulation and front-running. Employee or service provider errors, including mistakes in executing, recording, or processing transactions for customers, could expose us to the risk of material losses even if the errors are detected. Although we have implemented processes and procedures and provide trainings to our employees and service providers to reduce the likelihood of misconduct and error, these efforts may not be successful. Moreover, the risk of employee or service provider error or misconduct may be even greater for novel products and services and is compounded by the fact that many of our employees and service providers are accustomed to working at tech companies which generally do not maintain the same compliance customs and rules as financial services firms. This can lead to high risk of confusion among employees and service providers with respect to compliance obligations, particularly including confidentiality, data access, trading, and conflicts. It is not always possible to deter misconduct, and the precautions we take to prevent and detect this activity may not be effective in all cases. If we were found to have not met our regulatory oversight and compliance and other obligations, we could be subject to regulatory sanctions, financial penalties, restrictions on our activities for failure to properly identify, monitor and respond to potentially problematic activity and seriously damage our reputation. Our employees, contractors, and agents could also commit errors that subject us to financial claims for negligence, as well as regulatory actions, or result in financial liability. Further, allegations by regulatory or criminal authorities of improper trading activities could affect our brand and reputation.

Previous wording

Further, any changes in the tax laws governing our activities may increase our tax expense, the amount of taxes we pay, or both. For example, the Tax Cuts and Jobs Act (the “TCJA”), enacted on December 22, 2017, significantly reformed the U.S. federal tax code, reducing the U.S. federal corporate income tax rate, making sweeping changes to the rules governing international business operations, and imposing new limitations on a number of tax benefits, including deductions for business interest and the use of net operating loss carryforwards. Effective beginning in 2022, the TCJA also eliminated the option to immediately deduct research and development expenditures and required taxpayers to amortize domestic expenditures over five years and foreign expenditures over fifteen years. The Inflation Reduction Act of 2022 (the “Inflation Reduction Act”), enacted on August 16, 2022, further amended the U.S. federal tax code, imposing a 15% minimum tax on “adjusted financial statement income” of certain corporations as well as an excise tax on the repurchase or redemption of stock by certain corporations, beginning in the 2023 tax year. In addition, over the last several years, the Organization for Economic Cooperation and Development has been working on a Base Erosion and Profit Shifting Project that, if implemented, would change various aspects of the existing framework under which our tax obligations are determined in many of the countries in which we do business. As of December 2024, over 140 countries have approved a framework that imposes a minimum tax rate of 15%, among other provisions. As this framework is subject to further negotiation and implementation by each member country, the timing and ultimate impact of any such changes on our tax obligations are uncertain. There can be no assurance that future tax law changes will not increase the rate of the corporate income tax, impose new limitations on deductions, credits or other tax benefits, or make other changes that could impact our cash flows and adversely affect our business, operating results, and financial condition.

Current wording

Further, any changes in the tax laws governing our activities may increase our tax expense, the amount of taxes we pay, or both. For example, the Tax Cuts and Jobs Act (the “TCJA”), enacted in 2017, significantly reformed the U.S. federal tax code, reducing the U.S. federal corporate income tax rate, making sweeping changes to the rules governing international business operations, and imposing new limitations on a number of tax benefits, including deductions for business interest and the use of net operating loss carryforwards. The Inflation Reduction Act of 2022 (the “Inflation Reduction Act”), enacted in 2022, further amended the U.S. federal tax code, imposing a 15% minimum tax on “adjusted financial statement income” of certain corporations as well as an excise tax on the repurchase or redemption of stock by certain corporations, beginning in the 2023 tax year. In addition, over the last several years, the Organization for Economic Cooperation and Development has been working on a Base Erosion and Profit Shifting (“BEPS”) Project that, if implemented, would change various aspects of the existing framework under which our tax obligations are determined in many of the countries in which we do business. As of December 2024, over 140 countries have approved a framework that imposes a minimum tax rate of 15%, among other provisions. As this framework is subject to further negotiation and implementation by each member country, the timing and ultimate impact of any such changes on our tax obligations are uncertain. Many of these provisions have been modified by the recently enacted “One Big Beautiful Bill,” signed into law on July 4, 2025. Moreover, the G7 countries, including the United States, recently agreed to modify the provisions of the BEPS Project which may limit its impact on us in future years. There can be no assurance that future tax law changes will not increase the rate of the corporate income tax, impose new limitations on deductions, credits or other tax benefits, or make other changes that could impact our cash flows and adversely affect our business, operating results, and financial condition.

Previous wording

The dual class structure of our common stock has the effect of concentrating voting control with those stockholders, including our directors, executive officers, and 5% stockholders, and their respective affiliates. As a result of this structure, our Chief Executive Officer has control over key decision making as a result of his control of a majority of our voting stock. This ownership will limit or preclude your ability to influence corporate matters, including the election of directors, amendments of our organizational documents, and any merger, consolidation, sale of all or substantially all of our assets, or other major corporate transaction requiring stockholder approval.

Current wording

The dual class structure of our common stock has the effect of concentrating voting control with those stockholders, including our directors, executive officers, and 5% stockholders, and their respective affiliates. As a result of this structure, our Chief Executive Officer and trusts established by our Chief Executive Officer collectively have control over key decision making as a result of controlling a majority of our voting stock. This ownership will limit or preclude your ability to influence corporate matters, including the election of directors, amendments of our organizational documents, and any merger, consolidation, sale of all or substantially all of our assets, or other major corporate transaction requiring stockholder approval.

Previous wording

Our Class B common stock has twenty votes per share, and our Class A common stock has one vote per share. Mr. Armstrong is currently able to exercise voting rights with respect to a majority of the voting power of our outstanding capital stock and, along with our directors, other executive officers, and 5% stockholders, and their affiliates, these stockholders hold in the aggregate a substantial majority of the voting power of our capital stock. Because of the twenty-to-one voting ratio between our Class B common stock and our Class A common stock, the holders of our Class B common stock, including Mr. Armstrong, collectively are expected to continue to control a significant percentage of the combined voting power of our common stock and therefore be able to control all matters submitted to our stockholders for approval until the earliest to occur of (i) the date fixed by the board of directors that is no less than 61 days and no more than 180 days after the date that the aggregate number of shares of Class B common stock held by Brian Armstrong and his affiliates is less than 25% of the aggregate number of shares of Class B common stock held by Mr. Armstrong and his affiliates on April 1, 2021, the date of effectiveness of the registration statement on Form S-1 for the listing of our Class A common stock on Nasdaq; (ii) the date and time specified by affirmative vote of the holders of at least 66-2/3% of the outstanding shares of Class B common stock, voting as a single class, and the affirmative vote of at least 66-2/3% of the then serving members of our board of directors, which must include the affirmative vote of Mr. Armstrong, if either (A) Mr. Armstrong is serving on our board of directors and has not been terminated for cause or resigned except for good reason (as each term is defined in our restated certificate of incorporation) from his position as our Chief Executive Officer or (B) Mr. Armstrong has not been removed for cause or resigned from the position of Chairman of the board of directors; and (iii) the death or disability (as defined in our restated certificate of incorporation) of Mr. Armstrong, when all outstanding shares of Class B common stock will convert automatically into shares of Class A common stock. Holders of our Class A common stock are not entitled to vote separately as a single class except under certain limited circumstances. This concentrated control may limit or preclude your ability to influence corporate matters for the foreseeable future, including the election of directors, amendments of our organizational documents, and any merger, consolidation, sale of all or substantially all of our assets, or other major corporate transaction requiring stockholder approval. In addition, this may prevent or discourage unsolicited acquisition proposals or offers for our capital stock that you may believe are in your best interest as one of our stockholders. In addition, Mr. Armstrong has the ability to control the manageme…

Excerpt shortened here; the source contains the full paragraph.

Current wording

Our Class B common stock has twenty votes per share, and our Class A common stock has one vote per share. Mr. Armstrong and the independent trustee of trusts established by Mr. Armstrong, collectively, are currently able to exercise voting rights with respect to a majority of the voting power of our outstanding capital stock and, along with our directors, other executive officers, and 5% stockholders, and their affiliates, these stockholders hold in the aggregate a substantial majority of the voting power of our capital stock. Because of the twenty-to-one voting ratio between our Class B common stock and our Class A common stock, the holders of our Class B common stock, including Mr. Armstrong, collectively are expected to continue to control a significant percentage of the combined voting power of our common stock and therefore be able to control all matters submitted to our stockholders for approval until the earliest to occur of (i) the date fixed by the board of directors that is no less than 61 days and no more than 180 days after the date that the aggregate number of shares of Class B common stock held by Brian Armstrong and his affiliates is less than 25% of the aggregate number of shares of Class B common stock held by Mr. Armstrong and his affiliates on April 1, 2021, the date of effectiveness of the registration statement on Form S-1 for the listing of our Class A common stock on Nasdaq; (ii) the date and time specified by affirmative vote of the holders of at least 66-2/3% of the outstanding shares of Class B common stock, voting as a single class, and the affirmative vote of at least 66-2/3% of the then serving members of our board of directors, which must include the affirmative vote of Mr. Armstrong, if either (A) Mr. Armstrong is serving on our board of directors and has not been terminated for cause or resigned except for good reason (as each term is defined in our restated certificate of incorporation) from his position as our Chief Executive Officer or (B) Mr. Armstrong has not been removed for cause or resigned from the position of Chairman of the board of directors; and (iii) the death or disability (as defined in our restated certificate of incorporation) of Mr. Armstrong, when all outstanding shares of Class B common stock will convert automatically into shares of Class A common stock. Holders of our Class A common stock are not entitled to vote separately as a single class except under certain limited circumstances. This concentrated control may limit or preclude your ability to influence corporate matters for the foreseeable future, including the election of directors, amendments of our organizational documents, and any merger, consolidation, sale of all or substantially all of our assets, or other major corporate transaction requiring stockholder approval. In addition, this may prevent or discourage unsolicited acquisition proposals or offers for our capital stock that you may believe are in your best interest as one of o…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

In October 2024, our board of directors authorized and approved the Share Repurchase Program, which provides for the repurchase of up to $1.0 billion of our outstanding Class A common stock without expiration. Repurchases may be made from time to time in the open market (including through trading plans intended to qualify under Rule 10b5-1 under the Exchange Act), in privately negotiated transactions, or by other methods in accordance with the applicable federal and state laws and regulations. The timing of any repurchases will depend on market conditions and will be made at our discretion. The Share Repurchase Program does not obligate us to repurchase any dollar amount or number of shares of our Class A common stock, and the program may be modified, suspended, or discontinued at any time.

Current wording

In October 2024, our board of directors authorized and approved the Share Repurchase Program, which provides for the repurchase of up to $1.0 billion of our outstanding Class A common stock without expiration. Repurchases may be made from time to time in the open market (including through trading plans intended to qualify under Rule 10b5-1 under the Securities Exchange Act of 1934, as amended (the “Exchange Act”)), in privately negotiated transactions, or by other methods in accordance with the applicable federal and state laws and regulations. The timing of any repurchases will depend on market conditions and will be made at our discretion. The Share Repurchase Program does not obligate us to repurchase any dollar amount or number of shares of our Class A common stock, and the program may be modified, suspended, or discontinued at any time.
Rearranged current paragraphs (1)

Current report — wording carried from elsewhere

Service (“IRS”), and various state securities and financial regulators have taken and continue to take legal action against persons and entities alleged to be engaged in fraudulent schemes or other illicit activity involving crypto assets. We also support crypto assets that incorporate privacy-enhancing features, and may from time to time support additional crypto assets with similar functionalities. These privacy-enhancing crypto assets obscure the identities of sender and receiver, and may prevent law enforcement officials from tracing the source of funds on the blockchain. Facilitating transactions in these crypto assets may cause us to be at increased risk of liability arising out of anti-money laundering and economic sanctions laws and regulations.
Rearranged previous paragraphs (1)

Previous report — wording carried elsewhere

Borrower loan loss rates may be significantly affected by economic downturns or general economic conditions beyond our control and beyond the control of individual borrowers. In particular, loss rates on loans may increase due to factors such as prevailing market conditions in the cryptoeconomy, the price of