Phio Pharmaceuticals Corp.

Evaluation of Disclosure Controls and Procedures

Our management, with the participation of our Principal Executive Officer and our Principal Financial Officer, evaluated the effectiveness of disclosure controls and procedures (as defined in Rules 13a-15(e) and 15d-15(e) under the Securities Exchange Act of 1934, as amended (the “Exchange Act”)) as of the end of the period covered by this report to ensure that information that we are required to disclose in reports that we file or submit under the Exchange Act is recorded, processed, summarized and reported within the time periods specified in the Securities and Exchange Commission’s rules and forms.

Our disclosure controls and procedures are designed to provide reasonable assurance of achieving their objectives. We believe that a control system, no matter how well designed and operated, cannot provide absolute assurance that the objectives of the control system are met, and no evaluation of controls can provide absolute assurance that all control issues and instances of fraud, if any, within a company have been detected. Based on the evaluation of our disclosure controls and procedures as of the end of the period covered by this report, management, with the participation of our Principal Executive Officer and our Principal Financial Officer, concluded that our disclosure controls and procedures were effective at the reasonable assurance level as of such date.

Management’s Annual Report on Internal Control Over Financial Reporting

Our management is responsible for establishing and maintaining adequate internal control over financial reporting. A company’s internal control over financial reporting is a process designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles.

There are inherent limitations in the effectiveness of any system of internal control, including the possibility of human error and the circumvention or overriding of controls. Accordingly, even effective internal controls can provide only reasonable assurances with respect to financial statement preparation. Further, because of changes in conditions, the effectiveness of internal control may vary over time.

Our management assessed the effectiveness of our internal control over financial reporting as of December 31, 2024. In making this assessment, management used the criteria set forth in Internal Control – Integrated Framework issued by the Committee of Sponsoring Organizations of the Treadway Commission (2013 framework). Based on this assessment, management, with the participation of our Principal Executive Officer and our Principal Financial Officer, concluded that, as of December 31, 2024, our internal control over financial reporting was effective.

Attestation Report of the Registered Public Accounting Firm

This Annual Report on Form 10-K provides only management’s report. As a smaller reporting company, we are not required to provide an attestation report by our independent registered public accounting firm regarding our internal control over financial reporting.

Changes in Internal Control Over Financial Reporting

There have been no changes in our internal control over financial reporting that occurred during the quarter ended December 31, 2024 that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.