Throughout this Annual Report on Form 10-K, we use a number of industry terms and concepts which are defined as follows:

Our mission is to increase economic freedom in the world.

Coinbase offers a safe, trusted, easy-to-use platform that start with usserves as a gateway to the cryptoeconomy for our three customer groups via both custodial and self-custodial solutions: consumers, institutions, and developers.

We continue to invest to grow with usand enhance our technology and product platform to ensure we are best positioned to serve as they experiencea one-stop shop to meet our customers’ needs as the benefitscryptoeconomy continues to evolve and web3 develops. Throughout this Annual Report on Form 10-K, we will refer to platform or platforms as our full suite of crypto-based products for investing, staking, spending, borrowing and transacting in crypto inofferings.

To support our customers’ needs, our goal is to expand access to a growing numberbreadth and depth of use cases. Today,crypto assets and fiat payment rails to our platform enables approximately 89 million retail users, 11,000 institutions,customers and 210,000 ecosystem partnersexpand access to engagemore product experiences – both proprietary and third party, largely decentralized applications (Dapps).

Our asset addition strategy is asset agnostic and we seek to add access to every asset where it is safe and legal to do so. USDC – a leading US dollar stablecoin redeemable 1:1 for US dollars – is an asset whereby we have a unique commercial arrangement and generate income through means other than our customers' engagement with crypto assets:our products and services. We offer rewards on USDC to our customers in order to encourage participation.

We serve as the users’consumers’ primary crypto account, offering both hosteda custodial solution with the Coinbase application and self hosted – safe, trusted, and easy-to-use waysself-custodied solution with Coinbase Wallet.

The Coinbase app provides customers a single platform to discover, invest,trade, stake, store, spend, earn, borrow, and use their crypto assets.assets in both our own proprietary and third party product experiences as we enable access to decentralized applications via an integrated web3 wallet.

We directly integrate with over 25 blockchain protocols and plan to integrate with more in the future. Each protocol has a unique design, with differences in characteristics such as its consensus mechanism and security model, and requires in-depth research and specific expertise both for initial integration and ongoing monitoring as transactions are recorded on the public blockchain. Our experience allows us to swiftly adapt to updates in the blockchain protocol, or “forks,” to safely support new products like staking, and to creatively reduce feesoffer two pricing options for our customers through strategies like batching transactions.

Beyond trading, one of the most popular transactions consumers often engage with is earning a yield on selecttheir crypto assets. We also provide services to allowenable our customers to participateearn yield on their crypto assets in multiple ways, including via staking rewards, DeFi yield and other methods unique to certain crypto assets. Certain blockchain rewards paid by underlying protocols. The largestprotocols, such as Ethereum, rely on staking, an alternative way to validate blockchain transactions. Network participants, in this case Coinbase, can designate a certain amount of thesetheir crypto assets on the network to validate transactions and get rewarded in kind from the network. Today, staking crypto assets is staking where we offer a technical challenge for most consumers. Staking independently requires a participant to run their own hardware, software, and maintain close to 100% up-time. We provide a true, on-chain proof-of-stake service, known as Delegated Proof of Stake, which reduces the complexities of staking and allows our retail usersconsumers to maintain full ownership of their crypto assets while earning staking rewards. In return, we receiveearn a commission on all staking rewards earned.received.

We also offer a separately managed retail software product, Coinbase Wallet, to consumers in over 100 markets, which allows usersthem to self-custodyengage and transact with the full universe of Dapps and crypto use cases without the need for a centralized intermediary such as Coinbase. The Coinbase Wallet product experience has similarities to the web3 wallet with key distinctions being consumers have sole control over their private keys and seed phrase, and have access to a more expansive set of assets and NFTsuse cases within web3. We monetize certain transactions conducted via Dapps such as charging a fee through fiat-to-crypto transactions, and/or a fee to engage in one placetransactions on decentralized exchanges.

Our strategy is to provide institutions an integrated trading and financing product platform that provides capital efficiency across spot and derivatives markets to interact with the cryptoeconomy and Web3, including an expanded set of approximately 5,500 crypto assetsweb3.

Today, our institutional products are custodial offerings. We expect to expand first party products and services. In addition, we seek to expand our products to provide institutions streamlined access to web3 and decentralized applications. A feeapplications over time.

We serve institutions through two primary products. Coinbase Prime is charged for select activities executeda comprehensive platform to serve all institutions’ spot crypto needs on an agency basis. We also provide market infrastructure in the self-hosted wallet.form of trading venues via the Coinbase Spot Market and the Coinbase Derivatives Exchange.

We offerUnderpinning Coinbase Prime is an institutional-grade custody platform with a highly secure cold storage solution made available through our U.S. qualified custodian, which offers audits, governance, digital key management,both within the US and physical security. Our solution is vertically integrated with our investing platform, providing institutions with access to liquidity and trading services.globally. We charge a separate fee based on the total assets stored in custody on our platform. We

Institutions also have the opportunity to earn rewards on their crypto assets held and we offer delegated, true, on-chain, proof-of-stake services for supported crypto assets. Institutions maintain full ownership of their crypto assets and similarwhile earning staking rewards. Similar to our retail users,consumers, we earn a commission on staking rewards received.

Increasingly important to institutions is the ability to have access to financing products. We offer integrated financing products and services to select institutional customersinstitutions that meet our credit criteria to access liquidity for their hedging, speculation,trading, and working capital needs. Customers typically need to pre-fund their account and maintain fiat or crypto assets on our platform in order to participate in the 24/7/365 instant settlement crypto market. We offer trade financing whereby we advance funds and settle on behalf of credit-eligible customers, removing a key point of friction by allowing customers to instantly trade on credit and settle within a few days. We earn interest income on loans outstanding.

We also operate a crypto assetprovide market infrastructure in the form of trading venues to trade spot via the Coinbase Spot Market and derivatives via the Coinbase Derivatives Exchange.

We recently added our first regulated derivatives offerings, the Nano Bitcoin Futures and Nano Ethereum Futures contracts, on our Coinbase Derivatives Exchange. Coinbase is the first crypto-native platform with deep liquidity that aggregates and matches buy and sell orders for a number of crypto assets. Coinbase Prime trades are routedto gain traction in regulated derivatives. Today, we offer other derivatives intermediaries the ability to trade on our derivatives exchange. Pending regulatory approval, we look forward to making these derivative products available directly to this platform, together with tradesour customers. We look to expand access to crypto markets by listing more trading pairs on our Spot Market and Derivatives Exchange.

Our Developer product suite includes some of market makersour most nascent products, including Coinbase Cloud and trades from our retail business. We offer volume-based pricing and charge a transaction fee for every matched trade.

The cryptoeconomy isremains highly fragmented, quickly evolving, intensely competitive, and subject to growingincreasingly global regulatory scrutiny and oversight.

The competitive landscape varies significantly by geography. For example, the traditional financial services and financial technology companies native towe compete against are largely US and European based and operate under the cryptoeconomy, such as decentralized exchanges. Moreover, this market is growing quickly and we expectsame evolving US regulatory landscape that we will face competition from new entrants in the future that may increase competition in the markets we operate.do.

For retail users,consumers, we compete with traditional financial technology and brokerage firms like Block (f/k/a Square), Robinhood, and PayPal. These companies have varying business models and focus areas and offer an overlapping, but limited, feature set, which includes buying and selling a subset of the crypto assets supported on our platform. In some cases, users who purchase through these platforms own the economic interest in a given crypto asset, but not the underlying asset itself, and therefore cannot use the asset to interact with the broader cryptoeconomy. We also compete with a numberrange of companies that solely focus on the crypto market, such as Binance.

Across our product portfolio, we differentiate ourselves through our cohesive ecosystem of products and services that address the distinct needs of our customers, our full-stack technology platform that is purpose-built for the cryptoeconomy, significant investments in regulatory compliance and licensure, advanced cryptography and security expertise, and our emphasis on accessibility, trust, and ease of use. We invest in user research, design, and experience to continuously improve the ability of our products to address our users’ needs.

Our ability to quickly and continuously innovate to support additional blockchains, provide products and services to our customers that are native to the cryptoeconomy,crypto economy, such as staking and governance, and launch additional products and services further separates us from our competition. See Part I, Item IA,1A, “Risk Factors” in this Annual Report on Form 10-K for a more comprehensive description of risks related to competition.

Crypto is natively digital, real-time,The failure of several prominent crypto trading venues and operates globally on a 24/7/365 basis.lending platforms, such as FTX, Celsius Networks, Voyager and Three Arrows Capital, in 2022 (the “2022 Events”) has impacted and may continue to impact the broader cryptoeconomy. The “always on” naturefull extent of these impacts may not yet be known. Impacts include, but are not limited to, the consequent and ongoing financial distress and bankruptcy of certain crypto market participants, loss of confidence in the broader cryptoeconomy, reputational harm to crypto asset platforms generally, increased negative publicity of the broader cryptoeconomy, demandsheightened scrutiny by regulators and lawmakers and calls for increased regulation of crypto assets and crypto asset platforms. We have had no material direct impact to our business, financial condition, customers or counterparties from the 2022 Events; however, the 2022 Events did cause a more scalablechange to crypto market prices, crypto market volatility and higher-throughput technical architecture. Our proprietary platformcustomer sentiment, and each of these drivers do indirectly impact our business and our revenue potential. We do not have any known material financial exposure to other cryptoeconomy participants that faced insolvency and liquidity issues, experienced excessive redemptions or suspended redemptions or withdrawals of crypto assets, allegedly mishandled customer funds, or experienced significant corporate compliance failures in connection with the 2022 Events.

Following the 2022 Events, one of our highest priorities is purpose-built to support the unique demands ofrestore confidence and interest in the cryptoeconomy and is builtmaintain and increase engagement on topour platform. We believe our safe and trusted crypto platform positions us well to achieve this, particularly because we have policies and procedures and take steps to help ensure proper safeguarding of modern technology designed specifically to address the unique engineering, cybersecurity, compliance, and usability challengescrypto assets we hold. We hold crypto assets on behalf of emerging blockchain technology, while seamlessly connecting to legacy technology and financial systems.

We place great importance on safeguarding customer crypto assets. We hold our customer assets 1:1 at all times, which means we do not lend or rehypothecate customer assets, and do not act on customer assets or engage in fractional reserve banking with respect to customer assets without customer consent. For consumer and institutional users who participate in our staking program, their staked assets remain their assets. Staking does not affect ownership of staked assets, and customers have the same custody relationship with us whether or not they stake. Also, when users stake their assets through Coinbase, the rewards they earn for helping to secure the network are directly tied to the rewards returned by on-chain network protocols and marketplaces, which Coinbase passes through minus a disclosed fee. Coinbase does not unilaterally determine what reward to pay or whether to pay a reward. Further, we appropriately ledger, properly segregate and maintain separate accounts for our corporate crypto assets and customers’ crypto assets. Additionally, with respect to Coinbase entities that provide cold storage (offlinecustody services, such as Coinbase Custody Trust Company, LLC, crypto assets are held separately in dedicated addresses and disconnectedledgered using a proprietary combination of hardware security modules. For Coinbase entities that provide crypto trading services, such as Coinbase, Inc., crypto assets are held in an omnibus manner on the blockchain and separated using a ledger system. Additionally, as a U.S. public company, we are required to undergo annual audits and quarterly reviews, which, among other things, require that our independent registered public accounting firm reviews and audits our crypto reserves, internal controls and reconciliation processes. Moreover, our various user, custody and client agreements clarify the applicability of Uniform Commercial Code (“UCC”) Article 8 to custodied crypto assets. UCC Article 8 provides that financial assets held by Coinbase are not property of Coinbase and not subject to claims of our general creditors.

We also have policies in place to help us govern accounting controls, including customer account initiations and reconciliations, and to help prevent improper self-dealing and other conflicts of interest between us and our customers on our crypto asset trading platforms. For example, we have a crypto asset investment policy that allows us to invest up to 10% of our quarterly net income into a diversified portfolio of crypto assets. We execute these trades away from our crypto asset trading platform to avoid any conflict of interest with our customers. Additionally, Coinbase is committed to providing a fair, transparent, and equitable experience across our suite of trading products. Crypto assets and use cases are rapidly expanding and Coinbase seeks to offer our consumers access to all assets and use cases where it is safe and legal to do so. For example, we take a number of steps to mitigate conflicts in our digital asset listing process. We have a digital asset support committee that is composed of senior leaders from our product, legal, compliance, finance, and accounting departments. The digital asset support committee reviews the relevant aspects of any asset escalated to it in connection with a listing on our trading platform in accordance with our digital asset support policies and procedures that are designed to mitigate conflicts. Only the digital asset support committee decides which of these escalated assets we can and cannot list on our platform, and it does not coordinate such decisions with anyone outside of the committee. We also have policies and procedures that require committee members to recuse themselves from asset listing decisions where a committee member may have a conflict of interest.

Further, we carefully handle and keep customer data confidential through security and encryption as well as policies, training and monitoring. Moreover, we invest heavily in compliance tools. InFor example, in addition to robust know-your-customer and anti-money laundering programs, we employ an industry leading third-party trade surveillance software platform that helps us monitor and detect problematic trading activities on our platform. We have built bespoke transaction monitoring systemsalso invested in a range of technologies that are designed to analyze crypto asset transactions in real timehelp identify and prevent harmful activity on the blockchain. This infrastructure allows us to quickly adapt to emerging threats in the cryptoeconomy, build scenarios and typologies around specific transaction types, and gives us the flexibility to support new products and services.

Powering the cryptoeconomy is no small task. Our employees join Coinbasetask, and requires hiring, developing and retaining the most talented individuals who are deeply passionate about our mission to increase economic freedom in the world.

We work incredibly hard in pursuit of ambitious goals. We signal who will thrive at Coinbase but, because of that intensity, we are also deliberateby being transparent about finding time to recover between sprints. When the creative moment strikes, we embrace efficient execution and adhere to robust security and compliance programs. However, we try not to let unnecessary bureaucracy impede our speed to market.culture through our publicly available culture document. Our culture has and will evolve but, at our core, we prioritize the following principles:

We instituted single, transparent pay targets for the vast majority of our roles – eliminating most compensation negotiations. We replaced four-year equity grants with annual one-year equity grants for all broad-based current and future employees that begin vesting immediately in lieu of one-year cliffs. We have also made meaningful investments in learning and development, offering each employee an annual learning budget, as well as access to unique industry education to help our employees better understand and build for the cryptoeconomy.

We offer competitive, transparent compensation and unique learning. We conduct an annual market review to ensure our compensation maintains in line with our competitive compensation philosophy. We have single, transparent pay targets for the vast majority of our roles - eliminating most compensation negotiations - and provide one-year equity grants for the vast majority of employees. We have also made meaningful investments in learning and development, including offering an annual learning stipend and in-house crypto learning curriculum.

We continuously improve our people programs and practices. We regularly monitor engagement through quarterly pulse surveys to continuously optimize our culture, employee engagement, risk management, and productivity. We invest in these surveys and associated action planning at the United Kingdom, Ireland, Germany, Israel, Brazil, India, Canada, Japan, Singapore,executive level, as we believe our people and the Philippines. Our distributed workforce is made upculture are key drivers of diverse backgrounds, skill sets and perspectives which is why we prioritize belonging, so that all employees feel they are a meaningful part of Coinbase and they matter.business success.

As of December 31, 2021,2022, we had 3,7304,510 employees. We workIn January 2023, we announced a reduction to identify, attract, and retain employees who are aligned with and will help us progress with our mission, and we seek to provide competitive cash and equity compensation. We believe we have a good relationship with our employees and our unique, strong culture differentiates us and is a key driver of business success.workforce by approximately 950 employees.

At the core of our mission is the philosophy that all people should have access to a more fair, accessible, efficient, and transparent financial system to support economic freedom. To this end, in April 2020 we subscribed to Pledge 1%, committing 1% of equity, profits and employee time to charitable endeavors to expand economic freedom specifically through crypto and blockchain applications. At this time, our board of directors approved the reservation of up to 2,295,766 shares of Class A common stock that we may issue, over a period of ten years, in connection with our philanthropic endeavors. In May 2021, we announced the launch of Coinbase Giving, the operational embodiment of our commitment to Pledge 1%. In its first year, Coinbase Giving has funded charities and programs that broadly fall into three categories: (1) increasing education around, and access to, crypto; (2) accelerating the development of crypto protocols that underpin the cryptoeconomy; and (3) fostering the next generation of crypto talent, no matter where they are located.

We operate globally in a complex and rapidly evolving regulatory environment and are subject to a wide range of laws and regulations enacted by U.S. federal, state, and local and foreign governments and regulatory authorities. We play a leadership role in driving innovative industry-wide solutions to comply with new regulations. For example, we devote resources to solving interoperability issues amongst virtual asset service providers to ensure compliance with the Travel Rule under the Bank Secrecy Act, or the BSA. In addition, we are a founding member of the Crypto Rating Council, a member-owned and operated organization whose purpose is to assess whether any given crypto asset, or whether the development, issuance, and use of such assets, have characteristics that make it more or less likely to implicate U.S. federal securities laws.

Globally, we are subject to increasingly strict legal and regulatory requirements relating to the detection and prevention of countering terrorist financing, anti-money laundering, fraud, tax evasion, and other illicit activity, the regulation of competition, economic and trade sanctions, privacy, cybersecurity, information security, and data protection. These descriptions are not exhaustive, and these laws, regulations and rules (and the interpretations thereof) frequently change and are increasing in number.

The laws and regulations to which we are subject, including those pertaining to digital assets and crypto assets, are rapidly evolving and increasing in scope. Therefore, we monitor these areas closely and invest significant resources in our legal, compliance, product, and engineering teams to ensure our business practices evolve to help us comply with the current laws, regulations, and legal standards to which we are subject, as well as to plan and prepare for changes in interpretations thereof, as well as additional laws, regulations and legal standards that are introduced in the future.

We are subject to various anti-money laundering and counter-terrorist financing laws, including the BSABank Secrecy Act (the “BSA”) in the United States, and similar laws and regulations abroad. In the United States, as a money services business registered with the Financial Crimes Enforcement Network or FinCEN,(“FinCEN”), the BSA requires us to among other things, develop, implement, and maintain a risk-based anti-money laundering program, provide an anti-money laundering-related training program, report suspicious activities and transactions to FinCEN, comply with certain reporting and recordkeeping requirements, and collect and maintain information about our customers. In addition, the BSA requires us to comply with certain customer due diligence requirements as part of our anti-money laundering obligations, including developing risk-based policies, procedures, and internal controls reasonably designed to verify a customer’s identity. Many states and other countries impose similar and, in some cases, more stringent requirements related to anti-money laundering and counter-terrorist financing. We have implemented a compliance program designed to prevent our platform from being used to facilitate money laundering, terrorist financing, and other illicit activity in countries, or with persons or entities, included on designated lists promulgated by the Office of Foreign Assets Control or OFAC,(“OFAC”), and equivalent foreign authorities. Our compliance program includes policies, procedures, reporting protocols, and internal controls, and is designed to address legal and regulatory requirements as well as to assist us in managing risks associated with money laundering and terrorist financing. Anti-money laundering regulations are constantly evolving and vary from jurisdiction-to-jurisdiction. We continuously monitor our compliance with anti-money laundering and counter-terrorist financing regulations and industry standards and implement policies, procedures, and controls in light of the most current legal requirements.

In the United States, we have obtained licenses to operate as money transmitters or the equivalent in the states where such licenses or equivalent are required to conduct our business, as well as in the District of Columbia and Puerto Rico. In addition, we have obtained a BitLicense from the New York State Department of Financial Services or NYDFS.(“NYDFS”). As a licensed money transmitter and an entity subject to the BitLicense regulatory regime, we are subject to, among other things, the BSA, restrictions and requirements with respect to the investment of customer funds and use and safeguarding of customer funds and crypto assets, and bonding, capital requirements including our aggregate net worth, prudential compliance obligations associated with customer notice and disclosure, reporting and recordkeeping requirements applicable to the company, as well as control persons and inspection and examination by state regulatory agencies. These state licensing laws also cover matters such as regulatory approval of controlling stockholders, directors, and senior management of the licensed entity.

Outside the United States, we have obtained licenses to provide crypto-asset custody and trading from the German Federal Financial Supervisory Authority. We are also registered as a crypto asset exchange service provider in Japan which provides crypto-asset and first-party payments services to Japanese customers pursuant to registration with the Kanto Local Finance Bureau of the Ministry of Finance of Japan, covering both crypto-asset and first-party payment services. In Singapore, we operate under the Payment Services Act and are supervised by the Monetary Authority of Singapore (“MAS”). We are presently operating under an In-Principal Approval status subject to MAS final approval to become a Major Payments Institution. Under these licenses and registrations, we are subject to a broad range of rules and regulations including in respect of AML, safeguarding of customer assets and funds, regulatory capital requirements, fit and proper management, operational controls, corporate governance, customer disclosures, reporting and record keeping.

Our subsidiary, Coinbase Custody Trust Company, LLC, operates as a New York State-chartered limited purpose trust company, which is subject to regulation, examination, and supervision by the NYDFS. NYDFS regulations impose various compliance requirements including, without limitation, operational limitations related to the nature of crypto assets we can hold under custody, capital requirements, BSA and anti-money laundering program requirements, affiliate transaction limitations, and notice and reporting requirements.

We serve our customers through Electronic Money Institutions authorized by the U.K. Financial Conduct Authority and the Central Bank of Ireland. We comply with rules and regulations applicable to the European e-money industry, including those related to funds safeguarding, corporate governance, anti-money laundering, disclosure, reporting, and inspection. We are, or may be, subject to banking-related regulations in other countries now or in the future related to our role in the financial industry.

We are required to comply with economic and trade sanctions administered by the United States, the European Union, or E.U., relevant E.U. member states, and other jurisdictions in which we operate. Economic and trade sanctions programs administered by OFAC and by certain foreign jurisdictions prohibit or restrict transactions to or from (or dealings with or involving) certain countries, regions, governments, and in certain circumstances, specified individuals and entities such as narcotics traffickers, terrorists, and terrorist organizations, as well as certain digital currency addresses.

In recent years, the Securities and Exchange Commission or SEC,(“SEC”) and U.S. state securities regulators have stated that certain digital assets or digital asset products may be classified as securities under U.S. federal and state securities laws - however, there has not been definitive guidance on this point. A number of enforcement actions and regulatory proceedings have since been initiated against digital assets and digital asset products and their developers and proponents, as well as against trading platforms that support digital assets. Several foreign governments have also issued similar warnings cautioning that digital assets may be deemed to be securities under the laws of their jurisdictions.

Our broker-dealer business is operated by both Coinbase Capital Markets and Coinbase Securities, which are registered with the SEC as broker-dealers under the Securities and Exchange Act of 1934, as amended, or the Exchange Act, and in the states in which they conduct business. They are also members of and subject to the rules of the Financial Industry Regulation Authority or FINRA.(“FINRA”). All of our broker-dealer activities are subject to regulation, examination, investigation, and disciplinary action by the SEC, FINRA, and state securities regulators, as well as other governmental authorities and self-regulatory organizations with which they are registered or licensed or of which they are a member.

The CFTC has stated and CFTC enforcement actions have confirmed that at least some crypto assets, including Bitcoin, fall within the definition of a “commodity” under the U.S. Commodities Exchange Act of 1936 or the CEA.(the “CEA”). Under the CEA, the CFTC has broad enforcement authority to police market manipulation and fraud in spot commodity markets, including the spot crypto asset markets. We are subject to such authority with respect to improper trading on our platform. In addition, CFTC regulations and CFTC oversight and enforcement authority apply with respect to futures, swaps, other derivative products, and certain retail leveraged commodity transactions involving crypto assets, including the markets on which these products trade. Separately, security-based swaps are subject to SEC regulation and oversight. In general, we seek to ensure that crypto asset transactions on our crypto asset trading platform do not constitute futures, swaps, security-based swaps, other derivative products, or retail leveraged commodity transactions. Given our novel business model and uncertainty regarding the application of some of these laws and regulations, we may become subject to regulatory scrutiny or legal challenge with respect to our compliance with these requirements. Separately, our subsidiary, Coinbase Financial Markets, Inc. has applied for registration as a futures commission merchant or FCM,(“FCM”) with the National Futures Association, and in February 2022, we recently acquired FairXchange, Inc.,LMX Labs, LLC, a designated contract market or DCM,(“DCM”) regulated by the CFTC.CFTC, in connection with our acquisition of FairXchange, Inc. FCMs and DCMs are subject to numerous regulatory requirements, including strict capital requirements.

We are subject to regulations imposed by the FCPA in the United States and similar laws in other countries, such as the Bribery Act 2010 in the United Kingdom, or the Bribery Act, which generally prohibit companies and those acting on their behalf from making improper payments to foreign government officials for the purpose of obtaining or retaining business. Some of these laws, such as the Bribery Act, also prohibit improper payments between private entities and persons.

We are subject to a number of laws, rules, directives, and regulations relating to the collection, use, retention, security, processing, and transfer of personally identifiable information about our customers and employees in the countries where we operate. Our business relies on the processing of personal data in many jurisdictions and the movement of data across national borders. As a result, much of the personal data that we process, which may include certain financial information associated with individuals, is regulated by multiple privacy and data protection laws and, in some cases, the privacy and data protection laws of multiple jurisdictions. In many cases, these laws apply not only to third-party transactions, but also to transfers of information between or among us, our subsidiaries, and other parties with which we have commercial relationships.

The Federal Trade Commission, or FTC, the Consumer Financial Protection Bureau, or CFPB, and other U.S. federal, state, and local and foreign regulatory agencies regulate financial products, including money transfer services related to remittance or peer-to-peer transfers. These agencies, as well as certain other governmental bodies, including state attorneys general, have broad consumer protection mandates and discretion in enforcing consumer protection laws, including matters related to unfair or deceptive, and, in the case of the CFPB, abusive, acts or practices or UDAAPs,(“UDAAPs”), and they promulgate, interpret, and enforce rules and regulations that affect our business. For example, all persons offering or providing financial services or products to consumers in the United States, directly or indirectly, can be subject to enforcement actions related to the prohibition of UDAAPs. The CFPB has enforcement authority to prevent an entity that offers or provides consumer financial services or products or a service provider in the United States from committing or engaging in UDAAPs or violating other federal consumer financial laws such as Regulation E, including the ability to engage in joint investigations with other agencies, issue subpoenas and civil investigative demands, conduct hearings and adjudication proceedings, commence a civil action, grant relief (e.g., limit activities or functions; rescission of contracts), and refer matters for criminal proceedings. Recent market disruptions have led to numerous proposals among consumer protection focused agencies including by the FTC and CFPB for changes in the regulation of the crypto industry. New laws or regulations, or changes in enforcement of existing laws or regulations could require us to change certain business practices related to consumer disclosures, marketing and operational features related to payments and remittance regulations and other laws that may impact our business.

We are subject to unclaimed property laws in the United States and in other jurisdictions where we operate. These laws require us to turn over to certain government authorities the property of others held by us that has been unclaimed for a specified period of time, including airdropped tokens and forked crypto assets. These laws may also require us to liquidate that property prior to turning it over. We hold property subject to unclaimed property laws, and we have an ongoing program designed to help us comply with these laws. However, there is significant regulatory uncertainty with how states and foreign jurisdictions treat crypto assets under unclaimed property rules.

We originate secured consumer and commercial loans in certain states in the United States. As a result, we are subject to certain federal laws, including: the Truth-in-Lending Act and its implementation of Regulation Z, which require creditors to provide consumers with certain information regarding the terms of their loan and credit transactions; the Equal Credit Opportunity Act and its implementation of Regulation B, which prohibits creditors from discriminating on the basis of race, color, sex, age, religion, national origin, marital status, the fact that all or part of an applicant’s income derives from public assistance, or the fact that the applicant has exercised any right under the federal Consumer Credit Protection Act; the Fair Credit Reporting Act; and the Fair Debt Collection Practices Act, which imposes guidelines and limitations on the conduct of debt collectors in connection with the collection of consumer debts. Our lending activities are also subject to various state lending laws and licensure requirements with respect to lending activities within such state. These state lending laws may be enforced by state attorneys general, state financial regulators, and private litigants, among others.

We are also subject to and seek to comply with other state and federal laws and regulations applicable to consumer and commercial lending, including additional requirements relating to loan disclosure, credit discrimination, debt collection, interest rate restrictions, and UDAAPs. These laws and regulations may be enforced by state financial regulators, state attorneys general, the CFPB, and private litigants, among others. Given our novel business model and uncertainty regarding application of some of these laws and regulations, particularly laws prohibiting UDAAPs, we may become subject to regulatory scrutiny or legal challenge with respect to our compliance with these requirements.

Interchange fees associated with four-party payments systems are being reviewed or challenged in various jurisdictions. For example, in the European Union, the Multilateral Interchange Fee Regulation caps interchange fees for credit and debit card payments and provides for business rules to be complied with by any company dealing with card transactions, including us. As a result, the fees that we collect in certain jurisdictions may become the subject of regulatory challenge.

Prepaid card programs are subject to various federal and state laws and regulations, including consumer financial protection regulations such as the CFPB's Regulation E, which imposes requirements on issuers of prepaid cards. The laws and regulations impose compliance obligations and costs on our business, and failure to comply could result in litigation, enforcement actions, and penalties.

In addition to the federal and state laws and regulations governing prepaid cards, we, as well as the bank that issues our Coinbase Card, are subject to and required to comply with card association and payment network rules and guidelines which apply to prepaid cards. The card association and payment network rules govern a variety of areas, including how consumers and merchants may use their cards and data security, and may be changed periodically. Noncompliance with these rules could result in fines or penalties levied by the card association or payment network for certain acts or omissions, or the termination of our ability to offer prepaid cards.

The bylaws and agreements between clearing house participants and bankcard companies impose specific responsibilities and liabilities for issuers of debit cards. As the issuer of the Coinbase Card, we are required to comply with the appropriate National Automated Clearing House Association, or NACHA, bylaws, operating rules, and agreements, as well as card network rules and guidelines. Additional new products and services that we offer may also impose additional obligations on us to comply with NACHA and card network obligations related to preventing fraud, money laundering, and IT security breaches.

The protection of our technology and intellectual property is an important aspect of our business. We rely upon a variety of protections, including combination of patents, trademarks, trade secrets, copyrights, confidentiality procedures, and contractual commitments, and other legal rights to establish and protect our intellectual property. We generally enter into agreements with our employees and consultants that contain confidentiality provisions to control access to, and invention or work product assignment provisions to clarify ownership of, our proprietary information.

We were initially incorporated in May 2012 as Coinbase, Inc., a Delaware corporation. In January 2014, Coinbase Global, Inc. was incorporated as a Delaware corporation to act as the holding company of Coinbase, Inc. and our other subsidiaries. In April 2014, we completed a corporate reorganization whereby Coinbase, Inc. became a wholly-owned subsidiary of Coinbase Global, Inc. Coinbase Global, Inc.’s principal assets are the equity interests of Coinbase, Inc. In addition to Coinbase, Inc., Coinbase Global, Inc. is the parent company of a number of other operating subsidiaries, including (i) CB Payments, Ltd, a private limited company incorporated under the laws of the United Kingdom, which provides e-money services to our United Kingdom and certain other international customers; (ii) Coinbase Ireland Limited, a private limited company incorporated under the laws of Ireland, which provides e-money services to our European Economic Area customers; and (iii) Coinbase Custody Trust Company, LLC, a New York limited liability trust company, which is authorized to exercise fiduciary powers under New York state banking law and holds certain crypto assets in trust for the benefit of our institutional customers.

Coinbase, the Coinbase logo, and other registered or common law trade names, trademarks, or service marks of Coinbase included in this Annual Report on Form 10-K are the property of Coinbase. Other trademarks, service marks, or trade names included in this Annual Report on Form 10-K are the property of their respective owners.

We are a remote-first company, meaning the majority of our employees work remotely. Due to this, we do not intend our use or display of other companies’ trade names, trademarks, or service marks to implyhave a relationship with these other companies, or endorsement or sponsorship of us by these other companies. Solely for convenience, our trademarks, service marks and trade names referred to in this Annual Report on Form 10-K appear without the ® and ™ symbols, but those references are not intended to indicate, in any way, that we will not assert, to the fullest extent under applicable law, our rights, or the right of the applicable licensor, to these trademarks, service marks and trade names.principal executive office.

We use our website, at www.coinbase.com and blog.coinbase.com, as well asblog, press releases, public conference calls, public webcasts, our Twitter feed (@coinbase), Facebook page, LinkedIn page, YouTube channel, and Brian Armstrong’s Twitter feed (@brian_armstrong) as means of disclosing material non-public information and for complying with our disclosure obligations under Regulation FD. The information disclosed by the foregoing channels could be deemed to be material information. As such, we encourage investors, the media, and others to follow the channels listed above and to review the information disclosed through such channels. The contentcontents of ourthe websites and information that we may post on or providereferred to online and social media channels, including those mentioned above and information that can be accessed through our websites or these online and social media channels are not incorporated by reference into this Annual Report on Form 10-K or in any other report or document we file with the SEC, and any references to our websites or these online and social media channels are intended to be inactive textual references only.filing.

Consistent with the foregoing, our business is subject to a number of risks and uncertainties, including those risks discussed at length below. These risks include, among others, the following, which we consider our most material risks:

As a result of these factors, it is difficult for us to forecast growth trends accurately and our business and future prospects are difficult to evaluate, particularly in the short term. In particular, our subscription and services revenue has grown over time with interest income received in connection with USDC is becoming a more meaningful revenue contributor. Therefore, our operating results could fluctuate significantly as a result of changes in the demand for our subscription and service offerings, in the demand for USDC, the balance of USDC on our platform, in interest rates, and to our ongoing relationships with third parties, such as the issuer of USDC.

In view of the rapidly evolving nature of our business and the cryptoeconomy, period-to-period comparisons of our operating results may not be meaningful, and you should not rely upon them as an indication of future performance. Quarterly and annual expenses reflected in our financial statements may be significantly different from historical or projected rates. Our operating results in one or more future quarters may fall below the expectations of securities analysts and investors. As a result, the trading price of our Class A common stock may increase or decrease significantly.

We generate substantially alla large portion of our total revenue from transaction fees on our platform in connection with the purchase, sale, and trading of crypto assets by our customers. Transaction revenue is based on transaction fees that are either a flat fee or a percentage of the value of each transaction. For our retail brokerageconsumer trading product, we also charge a spread to ensure that we are able to settle purchases and sales at the price we quote to customers. We also generate a large portion of total revenue from our subscription products and services, and while revenues from these products and services are growing, they have not been significantsuch revenue has grown over time, primarily due to date, most of this revenue will also fluctuate based on the price of crypto assets. As such, any declinesinterest income growth in connection with USDC. Declines in the volume of crypto asset transactions, the price of crypto assets, or market liquidity for crypto assets generally may result in lower total revenue.revenue to us.

The price of crypto assets and associated demand for buying, selling, and trading crypto assets have historically been subject to significant volatility. For instance, in 2017, the value of certain crypto assets, including Bitcoin, experienced steep increases in value, and our customer base expanded worldwide. The increaseincreases in value of certain crypto assets, including Bitcoin, from 2016 to 2017, wasand then again in 2021, were followed by a steep decline in 2018 and again in 2022, which has adversely affected our net revenue and operating results. If the value of crypto assets and transaction volume do not recover or further decline, our ability to generate revenue may suffer and customer demand for our products and services may decline, which could adversely affect our business, operating results and financial condition. The price and trading volume of any crypto asset is subject to significant uncertainty and volatility, depending on a number of factors, including:

There is no assurance that any supported crypto asset will maintain its value or that there will be meaningful levels of trading activities. In the event that the price of crypto assets or the demand for trading crypto assets decline, our business, operating results, and financial condition would be adversely affected.

WeWhile we support a diverse portfolio of crypto assets for trading, staking and custody. However,custody, our net revenue is concentrated in a limited number of areas, such as transactions in Bitcoin and Ethereum for transaction revenue and interest income in connection with USDC for subscription and services revenue. For the year ended December 31, 2022, we derived a more meaningful amount of our net revenue from interest income, primarily in connection with USDC, than we have historically. For the years ended December 31, 20212022 and December 31, 2020,2021, we derived a meaningful amount of our net revenue from transaction fees generated in connection with the purchase, sale, and trading of Bitcoin and Ethereum; these trading pairs drove overapproximately 55% and 45% and 56% of total Trading Volume on our platform during these periods, respectively. Moreover, during 2022, the value of Bitcoin and Ethereum declined steeply and if the value of Bitcoin and Ethereum do not recover or further decline, our business and operating results could be adversely affected. As such, in addition to the factors impacting the broader cryptoeconomy described in this section, our businessrevenue may be adversely affected if the markets for Bitcoin and Ethereum deteriorate or if their prices decline, including as a result of the following factors:

Crypto assets built on blockchain technology were only introduced in 2008 and remain in the early stages of development. In addition, different crypto assets are designed for different purposes. Bitcoin, for instance, was designed to serve as a peer-to-peer electronic cash system, while Ethereum was designed to be a smart contract and decentralized application platform. Many other crypto networks, rangingnetworks-ranging from cloud computing to tokenized securities networks, havenetworks-have only recently been established. The further growth and development of any crypto assets and their underlying networks and other cryptographic and algorithmic protocols governing the creation, transfer, and usage of crypto assets represent a new and evolving paradigm that is subject to a variety of factors that are difficult to evaluate, including:

Various other technical issues have also been uncovered from time to time that resulted in disabled functionalities, exposure of certain users’ personal information, theft of users’ assets, and other negative consequences, and which required resolution with the attention and efforts of their global miner, user, and development communities. If any such risks or other risks materialize, and in particular if they are not resolved, the development and growth of crypto may be significantly affected and, as a result, our business, operating results, and financial condition could be adversely affected.

Our business involves the collection, storage, processing, and transmission of confidential information, customer, employee, service provider, and other personal data, as well as information required to access customer assets. We have built our reputation on the premise that our platform offers customers a secure way to purchase, store, and transact in crypto assets. As a result, any actual or perceived security breach of us or our third-party partners may:

Further, any actual or perceived breach or cybersecurity attack directed at other financial institutions or crypto companies, whether or not we are directly impacted, could lead to a general loss of customer confidence in the cryptoeconomy or in the use of technology to conduct financial transactions, which could negatively impact us, including the market perception of the effectiveness of our security measures and technology infrastructure.

An increasing number of organizations, including large merchants, businesses, technology companies, and financial institutions, as well as government institutions, have disclosed breaches of their information security systems, some of which have involved sophisticated and highly targeted attacks, including on their websites, mobile applications, and infrastructure.

Attacks upon systems across a variety of industries, including the crypto industry, are increasing in their frequency, persistence, and sophistication, and, in many cases, are being conducted by sophisticated, well-funded, and organized groups and individuals, including state actors. The techniques used to obtain unauthorized, improper, or illegal access to systems and information (including customers’ personal data and crypto assets), disable or degrade services, or sabotage systems are constantly evolving, may be difficult to detect quickly, and often are not recognized or detected until after they have been launched against a target. These attacks may occur on our systems or those of our third-party service providers or partners. Certain types of cyberattacks could harm us even if our systems are left undisturbed. For example, attacks may be designed to deceive employees and service providers into releasing control of our systems to a hacker, while others may aim to introduce computer viruses or malware into our systems with a view to stealing confidential or proprietary data. Additionally, certain threats are designed to remain dormant or undetectable until launched against a target and we may not be able to implement adequate preventative measures.

Although we maintain insurance coverage, it may be insufficient to protect us against all losses and costs stemming from security breaches, cyberattacks, and other types of unlawful activity, or any resulting disruptions from such events. Outages and disruptions of our platform, including any caused by cyberattacks, may harm our reputation and our business, operating results, and financial condition.

Our business is subject to extensive laws, rules, regulations, policies, orders, determinations, directives, treaties, and legal and regulatory interpretations and guidance in the markets in which we operate, including those governing financial services and banking, federal government contractors, trust companies, securities, derivative transactions and markets, broker-dealers and alternative trading systems or ATS,(“ATS”), commodities, credit, crypto asset custody, exchange, and transfer, cross-border and domestic money and crypto asset transmission, retailconsumer and commercial lending, usury, foreign currency exchange, privacy, data governance, data protection, cybersecurity, fraud detection, payment services (including payment processing and settlement services), retailconsumer protection, escheatment, antitrust and competition, bankruptcy, tax, anti-bribery, economic and trade sanctions, anti-money laundering, and counter-terrorist financing. Many of these legal and regulatory regimes were adopted prior to the advent of the internet, mobile technologies, crypto assets, and related technologies. As a result, some applicable laws and regulations do not contemplate or address unique issues associated with the cryptoeconomy, are subject to significant uncertainty, and vary widely across U.S. federal, state, and local and international jurisdictions. These legal and regulatory regimes, including the laws, rules, and regulations thereunder, evolve frequently and may be modified, interpreted, and applied in an inconsistent manner from one jurisdiction to another, and may conflict with one another. Moreover, the complexity and evolving nature of our business and the significant uncertainty surrounding the regulation of the cryptoeconomy requires us to exercise our judgment as to whether certain laws, rules, and regulations apply to us, and it is possible that governmental bodies and regulators may disagree with our conclusions. To the extent we have not complied with such laws, rules, and regulations, we could be subject to significant fines, revocation of licenses, limitations on our products and services, reputational harm, and other regulatory consequences, each of which may be significant and could adversely affect our business, operating results, and financial condition.

In addition to existing laws and regulations,Additionally, various governmental and regulatory bodies, including legislative and executive bodies, in the United States and in other countries may adopt new laws and regulations.regulations, the direction and timing of which may be influenced by changes in the governing administrations and major events in the cryptoeconomy. For example, following the failure of several prominent crypto trading venues and lending platforms, such as FTX, Celsius Networks, Voyager and Three Arrows Capital in 2022 (the “2022 Events”), the U.S. Congress expressed the need for both greater federal oversight of the cryptoeconomy and comprehensive cryptocurrency legislation. In the near future, various governmental and regulatory bodies, including in the United States, may introduce new policies, laws, and regulations relating to crypto assets and the cryptoeconomy generally, and crypto asset platforms in particular. The failures of risk management and other control functions at other companies that played a role in the 2022 Events could accelerate an existing regulatory trend toward stricter oversight of crypto asset platforms and the cryptoeconomy. Furthermore, new interpretations of existing laws and regulations may be issued by such bodies or the judiciary, which may adversely impact the development of the cryptoeconomy as a whole and our legal and regulatory status in particular by changing how we operate our business, how our products and services are regulated, and what products or services we and our competitors can offer, requiring changes to our compliance and risk mitigation measures, imposing new licensing requirements, or imposing a total ban on certain crypto asset transactions, as has occurred in certain jurisdictions in the past. For example, under recommendations from FinCEN,the Financial Crimes Enforcement Network (“FinCEN”), and FATF,the Financial Action Task Force (“FATF”), the United States and several foreign jurisdictions have or are likely to impose the Funds Travel Rule and the Funds Transfer Rule (commonly referred to collectively as the Travel Rule) on financial service providers in the cryptoeconomy. We may face substantial costs to operationalize and comply with the Travel Rule and may be further subject to administrative sanctions for technical violations or customer attrition if the user experience suffers as a result. In December 2020, FinCEN released a proposed rule that would require us to collect personal information from the owners of self-custodied wallets that transfer cryptocurrencies to or receive cryptocurrencies from us, and report certain transactions to the federal government. There are substantial uncertainties on how these requirements would apply in practice, and we may face substantial costs to operationalize and comply with these rules.

We may be further subject to administrative sanctions for technical violations or customer attrition if the user experience suffers as a result. As another example, the recent extension of anti-money laundering requirements to certain crypto-related activities by the E.U.’sEuropean Union’s Fifth Money Laundering Directive has increased the regulatory compliance burden for our business in Europe and, as a result of the fragmented approach to the implementation of its provisions, resulted in distinct and divergent national licensing and registration regimes for us in different E.U. member states. Further E.U.-level legislation imposing additional regulatory requirements in relation to crypto-related activities is also expected in the intermediatenear term, which, amongsuch as with the enactment of the Markets in Crypto-Assets Regulation (“MiCA”). Among other things, may impose new or additional regulatory requirements on bothprovisions, MiCA is expected to introduce a comprehensive authorization and compliance regime for crypto asset service providers and a disclosure regime for the issuers of certain crypto assets, which mayis expected to impact our operations in the European Union. For example, the requirements of privacy and data protection laws in the European Union, United States, and elsewhere are typically founded on the premise of centralized, data-controller-based data processing, and require fulfilling, among other things, individual rights to access or delete one’s data. This creates unique compliance challenges given the nature of blockchain’s peer-to-peer network architecture, lack of centralized control, immutability, and perpetual data storage.

Due to our business activities, we are subject to ongoing examinations, oversight, and reviews and currently are, and expect in the future, to be subject to investigations and inquiries, by U.S. federal and state regulators including the NYDFS, and foreign financial service regulators, including the U.K. Financial Conduct Authority and the Central Bankmany of Ireland, which each have broad discretion to audit and examine our business. We are periodically subject to audits and examinations by these regulatory authorities. As a result of findings from these audits and examinations, regulators have, are, and may in the future require us to take certain actions, including amending, updating, or revising our compliance measures from time to time, limiting the kinds of customers that we provide services to, changing, terminating, or delaying our licenses and the introduction of our existing or new product and services, and undertaking further external audit or being subject to further regulatory scrutiny, including investigations and inquiries. We have received, and may in the future receive, examination reports citing violations of rules and regulations, inadequacies in existing compliance programs, and requiring us to enhance certain practices with respect to our compliance program, including due diligence, monitoring, training, reporting, and recordkeeping. Implementing appropriate measures to properly remediate these examination findings may require us to incur significant costs, and if we fail to properly remediate any of these examination findings, we could face civil litigation, significant fines, damage awards, forced removal of certain employees including members of our executive team, barring of certain employees from participating in our business in whole or in part, revocation of existing licenses, limitations on existing and new products and services, reputational harm, negative impact to our existing relationships with regulators, exposure to criminal liability, or other regulatory consequences. For example, in January 2023, we settled a New York Department of Financial Services (“NYDFS”) compliance investigation for a monetary penalty of $50 million and a separate commitment to make $50 million in compliance program investments by the end of 2024. Further, we believe increasingly strict legal and regulatory requirements and additional regulatory investigations and enforcement, any of which could occur or intensify, may continue to result in changes to our business, as well as increased costs, and supervision and examination for ourselves, our agents, and service providers. Moreover, new laws, regulations, or interpretations may result in additional litigation, regulatory investigations, and enforcement or other actions, including preventing or delaying us from offering certain products or services offered by our competitors or could impact how we offer such products and services. Adverse changes to, or our failure to comply with, any laws and regulations have had, and may continue to have, an adverse effect on our reputation and brand and our business, operating results, and financial condition.

The cryptoeconomy is highly innovative, rapidly evolving, and characterized by healthy competition, experimentation, changing customer needs, frequent introductions of new products and services, and subject to uncertain and evolving industry and regulatory requirements. We expect competition to further intensify in the future as existing and new competitors introduce new products or enhance existing products. We compete against a number of companies operating both within the United States and abroad, and both those that focus on traditional financial services and those that focus on crypto-based services. Our main competitors fallcompetition falls into the following categories:

Historically, a major source of competition to date has been from companies, in particular those located outside the United States, who are subject to significantly less stringent regulatory and compliance requirements in their local jurisdictions. Their business models rely on being unregulated or only regulated in a small number of lower compliance jurisdictions, whilst also offering their products in highly regulated jurisdictions, including the United States, without necessarily complying with the relevant regulatory requirements in such jurisdictions.

To date, due to limited enforcement by United States and foreign regulators, many of these competitors have been able to operate from offshore while offering large numbers of products and services to retail users,consumers, including in the United States, Europe, and other highly regulated jurisdictions, without complying with the relevant licensing and other requirements in these jurisdictions, and seemingly without penalty. Due to our regulated status in several jurisdictions and our commitment to legal and regulatory compliance, we have not been able to offer many popular products and services, including products and services that our unregulated or less regulated competitors are able to offer to a group that includes many of our customers, which may adversely impact our business, financial condition, and results of operations.

In recent years, our commitment to compliance and the attendant customer-facing requirements, including customer due diligence requirements, have resulted in our customers transferring significant funds and crypto assets to these unregulated or less regulated competitors. We also have expended significant managerial, operational, and compliance costs to meet the legal and regulatory requirements applicable to us in the United States and other jurisdictions in which we operate, and expect to continue to incur significant costs to comply with these requirements, which these unregulated or less regulated competitors have not had to incur.

Additionally, due to the broad nature of our products and services, we also compete with, and expect additional competition from, digital and mobile payment companies and other traditional financial services companies.

Many innovative start-up companies and larger companies have made, and continue to make, significant investments in research and development, and we expect these companies to continue to develop similar or superior products and technologies that compete with our products. Further, more traditional financial and non-financial services businesses may choose to offer crypto-based services in the future as the industry gains adoption. Our current and potential competitors may establish cooperative relationships among themselves or with third parties that may further enhance their resources.

Our existing competitors have, and our potential competitors are expected to have, various competitive advantages over us, such as:

If we are unable to compete successfully, or if competing successfully requires us to take costly actions in response to the actions of our competitors, our business, operating results, and financial condition could be adversely affected.

We also compete against an increasing number of decentralized and noncustodial platforms. On these platforms, users can interact directly with a market-making smart contract or on-chain trading mechanism to exchange one type of crypto asset for another without any centralized intermediary. These platforms are typically not as easy to use as our platform, and some lack the speed and liquidity of centralized platforms, but various innovative models and incentives have been designed to bridge the gap. In addition, such platforms have low startup and entry costs as market entrants often remain unregulated and have minimal operating and regulatory costs. A significant number of decentralized platforms have recently been developed and released, including on Ethereum, Tron, Polkadot, and Solana, and many such platforms have experienced significant growth and adoption. For instance, we have seen increased interest in certain decentralized platforms with transaction volumes rivaling our own platform on multiple occasions, and expect interest in decentralized and noncustodial platforms to grow further as the industry develops. If the demand for decentralized platforms grows and we are unable to compete with these decentralized and noncustodial platforms, our business may be adversely affected.

As we expand and localize our international activities, we have become increasingly obligated to comply with the laws, rules, regulations, policies, and legal interpretations of both the jurisdictions in which we operate and those into which we offer services on a cross-border basis. For instance, financial regulators outside the United States have in recent months significantly increased their scrutiny of crypto asset exchanges over time, such as by requiring crypto asset exchanges operating in their local jurisdictions to be regulated and licensed under local laws. Moreover, laws regulating financial services, the internet, mobile technologies, crypto, and related technologies outside of the United States are highly evolving, extensive and often impose different, more specific, or even conflicting obligations on us, as well as broader liability. In addition, we are required to comply with laws and regulations related to economic sanctions and export controls enforced by U.S. Department of Commerce’s Bureau of Industry and Security, and U.S. anti-money laundering and counter-terrorist financing laws and regulations, enforced by FinCEN and certain state financial services regulators. U.S. sanctions and export control laws and regulations generally restrict dealings by persons subject to U.S. jurisdiction with certain jurisdictions that are the target of comprehensive embargoes, currently the Crimea Region, the Donetsk People's Republic (DNR), and the Luhansk People's Republic (LNR) of Ukraine, Cuba, Iran, North Korea, and Syria, as well as with persons, entities, and governments identified on certain prohibited party lists. Moreover, as a result of the Russian invasion of Ukraine, the United States, the E.U., the United Kingdom, and other jurisdictions have imposed wide-ranging sanctions on Russia and Belarus and persons and entities associated with Russia and Belarus. There can be no certainty regarding whether such governments or other governments will impose additional sanctions, or other economic or military measures against Russia or Belarus. We have continued to engage in activity in Russia and Belarus and with customers associated with these countries. At the same time, we have implemented additional processes and procedures to further compliance with these new sanctions. However, our activity in Russia and Belarus and with these customers associated with these countries subjects us to further exposure to sanctions as they are released. We have an OFAC compliance program in place that includes monitoring of IP addresses to identify prohibited jurisdictions and of blockchain addresses that have either been identified by OFAC as prohibited or that otherwise are believed by us to be associated with prohibited persons or jurisdictions. Nonetheless, there can be no guarantee that our compliance program will prevent transactions with particular persons or addresses or prevent every potential violation of OFAC sanctions. From time to time, we have submitted voluntary disclosures to OFAC or responded to administrative subpoenas from OFAC. Certain of these voluntary self-disclosures are currently under review by OFAC. To date, none of those proceedings has resulted in a monetary penalty or finding of violation. Any present or future government inquiries relating to sanctions could result in negative consequences for us, including costs related to government investigations, financial penalties, and harm to our reputation. The impact on us related to such matters could be substantial. Although we have implemented controls, and are working to implement additional controls and screening tools designed to prevent sanctions violations, there is no guarantee that we will not inadvertently provide access to our products and services to sanctioned parties or jurisdictions in the future.

Regulators worldwide frequently study each other’s approaches to the regulation of the cryptoeconomy. Consequently, developments in any jurisdiction may influence other jurisdictions. New developments in one jurisdiction may be extended to additional services and other jurisdictions. As a result, the risks created by any new law or regulation in one jurisdiction are magnified by the potential that they may be replicated, affecting our business in another place or involving another service. Conversely, if regulations diverge worldwide, we may face difficulty adjusting our products, services, and other aspects of our business with the same effect. These risks are heightened as we face increased competitive pressure from other similarly situated businesses that engage in regulatory arbitrage to avoid the compliance costs associated with regulatory changes.

The complexity of U.S. federal and state and international regulatory and enforcement regimes, coupled with the global scope of our operations and the evolving global regulatory environment, could result in a single event prompting a large number of overlapping investigations and legal and regulatory proceedings by multiple government authorities in different jurisdictions. Any of the foregoing could, individually or in the aggregate, harm our reputation, damage our brand and business, and adversely affect our operating results and financial condition. Due to the uncertain application of existing laws and regulations, it may be that, despite our regulatory and legal analysis concluding that certain products and services are currently unregulated, such products or services may indeed be subject to financial regulation, licensing, or authorization obligations that we have not obtained or with which we have not complied. As a result, we are at a heightened risk of enforcement action, litigation, regulatory, and legal scrutiny which could lead to sanctions, cease and desist orders, or other penalties and censures which could significantly and adversely affect our continued operations and financial condition.

Because of our large customer base, actions against us may claim large monetary damages, even if the alleged per-customer harm is small or non-existent. From time to time, we receive letters alleging claims on behalf of our users. Due to our large customer base, the ongoing defense and resolution or settlement of these alleged claims could be material and we may incur significant expenses associated with arbitrating or litigating the claims. Moreover, to the extent the current deterioration of the crypto asset market continues for a prolonged period, large platforms like us may become subject to or the target of increased litigation and additional government and regulatory scrutiny. Regardless of the outcome, any such matters can have an adverse impact, which may be material, on our business, operating results, or financial condition because of legal costs, diversion of management resources, reputational damage, and other factors.

The SECSecurities and Exchange Commission (the “SEC”) and its staff have taken the position that certain crypto assets fall within the definition of a “security” under the U.S. federal securities laws. The legal test for determining whether any given crypto asset is a security is a highly complex, fact-driven analysis that evolves over time, and the outcome is difficult to predict. The SEC generally does not provide advance guidance or confirmation on the status of any particular crypto asset as a security. Furthermore, the SEC’s views in this area have evolved over time and it is difficult to predict the direction or timing of any continuing evolution. It is also possible that a change in the governing administration or the appointment of new SEC commissioners could substantially impact the views of the SEC and its staff. For example, Chair Gary Gensler has repeatedly remarked on the need for further regulatory oversight on crypto assets, crypto trading, and lending platforms by the SEC. Public statements made in the past by senior officials at the SEC indicatehave indicated that the SEC does not intend to take the position that Bitcoin or Ethereum are securities (in their current form). In May 2022, the Chair of the U.S. Commodity Futures Trading Commission (the “CFTC”), Rostin Behnam, stated that Bitcoin and Ethereum are commodities. However, in June 2022, Mr. Gensler suggested that Bitcoin is a commodity but did not opine on the onlystatus of other crypto assets as to which seniorassets. In September 2022, Mr. Gensler suggested that he believes a vast majority of cryptocurrencies are securities. Such statements by officials at the CFTC and SEC have publicly expressed such a view. Moreover, such statements are not official policy statements by the SECthese agencies and reflect only the speakers’ views, which are not binding on the SEC or any other agency or court and cannot be generalized to any other crypto asset. In addition, in July 2022, the SEC separately filed securities fraud charges against a former employee related to misuse of confidential Coinbase information. These SEC charges allege that nine crypto assets involved in this matter are securities under federal securities laws, seven of which are, or were, listed on our platform: AMP, RLY, DDX, XYO, RGT, LCX, POWR. Despite the SEC being the principal federal securities law regulator in the United States, whether or not an asset is a security under federal securities laws is ultimately determined by a federal court. No court ruling has yet been made in connection with these seven crypto assets. With respect to allthese and other crypto assets, there is currently no certainty under the applicable legal test that such assets are not securities, notwithstanding the conclusions we may draw based on our risk-based assessment regarding the likelihood that a particular crypto asset could be deemed a “security” under applicable laws. Similarly, though the SEC’s Strategic Hub for Innovation and Financial Technology published a framework for analyzing whether any given crypto asset is a security in April 2019, this framework is also not a rule, regulation or statement of the SEC and is not binding on the SEC.

Several foreign jurisdictions have taken a broad-based approach to classifying crypto assets as “securities,” while other foreign jurisdictions, such as Switzerland, Malta, and Singapore, have adopted a narrower approach. As a result, certain crypto assets may be deemed to be a “security” under the laws of some jurisdictions but not others. Various foreign jurisdictions may, in the future, adopt additional laws, regulations, or directives that affect the characterization of crypto assets as “securities.”

The classification of a crypto asset as a security under applicable law has wide-ranging implications for the regulatory obligations that flow from the offer, sale, trading, and clearing of such assets. For example, a crypto asset that is a security in the United States may generally only be offered or sold in the United States pursuant to a registration statement filed with the SEC or in an offering that qualifies for an exemption from registration. Persons that effect transactions in crypto assets that are securities in the United States may be subject to registration with the SEC as a “broker” or “dealer.” Platforms that bring together purchasers and sellers to trade crypto assets that are securities in the United States are generally subject to registration as national securities exchanges, or must qualify for an exemption, such as by being operated by a registered broker-dealer as an ATS in compliance with rules for ATSs. Persons facilitating clearing and settlement of securities may be subject to registration with the SEC as a clearing agency. Foreign jurisdictions may have similar licensing, registration, and qualification requirements.

We have policies and procedures to analyze whether each crypto asset that we seek to facilitate trading on our platformCoinbase Spot Market could be deemed to be a “security” under applicable laws. Our policies and procedures do not constitute a legal standard, but rather represent our company-developed model, which permits uswe use to make a risk-based assessment regarding the likelihood that a particular crypto asset could be deemed a “security” under applicable laws. Regardless of our conclusions, we could be subject to legal or regulatory action in the event the SEC, a state or foreign regulatory authority, or a court were to determine that a supported crypto asset currently offered, sold, or traded on our platform is a “security” under applicable laws. BecauseAs discussed above, the SEC brought an enforcement action in July 2022 against a third party that alleges that seven crypto assets that are, or were, trading on our platform are securities. Such enforcement action may increase the risk that the SEC decides to bring an enforcement action against us for facilitating trading in these crypto assets on the basis that our platform is not registered as a national securities exchange or ATS.

Because Coinbase Spot Market, Coinbase Prime and Coinbase app are not registered or licensed with the SEC or foreign authorities as a broker-dealer, national securities exchange, or ATS (or foreign equivalents), and we do not seek to register or rely on an exemption from such registration or license to facilitate the offer and sale of crypto assets on our platform, we only permit trading on our core platform of those crypto assets for which we determine there are reasonably strong arguments to conclude that the crypto asset is not a security. We believe that our process reflects a comprehensive and thoughtful analysis and is reasonably designed to facilitate consistent application of available legal guidance to crypto assets to facilitate informed risk-based business judgment. However,In addition, as we shared in our petition for SEC rulemaking, we remain open to registering or relying on an exemption to facilitate and offer the sale of crypto asset securities. We recognize that the application of securities laws to the specific facts and circumstances of crypto assets may be complex and subject to change, and that a listing determination does not guarantee any conclusion under the U.S. federal securities laws. For example, in December 2020, we announced that we had made a decision to suspend all XRP trading pairs on our platform in light of the SEC’s lawsuit filed against Ripple Labs, Inc., or Ripple, (“Ripple”) and two of its executives, alleging that they have engaged in an unregistered, ongoing securities offering through the sale of XRP. The SEC’s litigation with Ripple is still pending resolution. Further, the SEC may file similar lawsuits against issuers of other crypto assets, which may cause us to reevaluate our support for such assets, and, potentially, decide to suspend listing such assets or assets with similar characteristics on our platform or suspend support for products related to such assets. Additionally, as discussed above, in July 2022, the SEC filed securities fraud charges against one of our former employees and, as part of that complaint, alleged that seven of the digital assets that are, or were, listed on our platform and traded by the former employee are securities. We expect our risk assessment policies and procedures to continuously evolve to take into account case law, facts, and developments in technology.

There can be no assurances that we will properly characterize over time any given crypto asset or product offering as a security or non-security for purposes of determining whether our platformCoinbase Spot Market will support trading of the crypto asset or product offering of the program, or that the SEC, foreign regulatory authority, or a court, if the question was presented to it, would agree with our assessment. IfFor example, in February 2023, the SEC stateentered into a settlement agreement with Kraken after alleging its staking-as-a-service program constituted an offering and sale of securities. Pursuant to the settlement agreement, Kraken committed to cease offering or foreignselling securities through its crypto asset staking services or staking programs in the United States. Coinbase also has a staking program, which meaningfully differs from Kraken’s and does not constitute an offering or sale of securities. Specifically, while Kraken itself determined the rewards customers of its staking program received, Coinbase pays rewards as set by the protocol, minus our disclosed, flat-rate commission. However, the SEC may not agree with our assessment. Additionally, in February 2023, the SEC issued a Wells notice to the Paxos Trust Company, LLC (“Paxos”), which Paxos claims pertains to a potential SEC action alleging BUSD, a stablecoin that we currently list for trading on our platform, is a security. As a result, it is unclear if the SEC would take a similar view or action with respect to other crypto assets. Further, the SEC may disagree with our prior assessments concerning XRP and the seven digital assets flagged in July 2022 and believe these crypto assets are securities. If an applicable regulatory authority or a court, in either case having final determinative authority on the topic, were to determine that a supported crypto asset currently offered, sold, or traded on our platform is a security, we would not be able to offer such crypto asset for trading until we are able to do so in a compliant manner. A determination by the SEC, a state or foreign regulatory authority, or a court that an asset that we currently support for trading on our platform constitutes a security may result in removing that crypto asset from our platform, and may also result in us determining that it is advisable to remove assets from our platform that have similar characteristics to the asset that was alleged or determined to be a security. In addition,Alternatively, we may determine not to remove a particular crypto asset from Coinbase Spot Market even if the SEC or another regulator alleges that the crypto asset is a security, pending a final judicial determination as to that crypto asset’s proper characterization, and the fact that we waited for a final judicial determination would generally not preclude penalties or sanctions against us for our having previously made our platform available for trading that crypto asset without registering as a national securities exchange or ATS or registering tokens that we may issue, such as our cbETH token, with the SEC. As such, we could be subject to judicial or administrative sanctions for failing to offer or sell the crypto asset in compliance with the registration requirements, or for acting as a broker, dealer, or national securities exchange without appropriate registration. Such an action could result in injunctions, cease and desist orders, as well as civil monetary penalties, fines, and disgorgement, criminal liability, and reputational harm. Customers that traded such supported crypto asset on our platform and suffered trading losses could also seek to rescind a transaction that we facilitated ason the basis that it was conducted in violation of applicable law, which could subject us to significant liability. We may also be required to cease facilitating transactions in the supported crypto asset other than via our licensed subsidiaries, which could negatively impact our business, operating results, and financial condition. Furthermore, ifAdditionally, the SEC has brought and may in the future bring enforcement actions against other cryptoeconomy participants and their product offerings that may cause us to modify or discontinue a product offering on our platform. If we were to modify or discontinue any product offering or remove any assets from trading on our platform for any reason, our decision may be unpopular with users, and may reduce our ability to attract and retain customers especially(especially if similar product offerings or such assets remain traded on unregulated exchanges, which includes many of our competitors.competitors), and may adversely affect our business, operating results, and financial condition.

Further, if Bitcoin, Ethereum, stablecoins or any other supported crypto asset is deemed to be a security under any U.S. federal, state, or foreign jurisdiction, or in a proceeding in a court of law or otherwise, it may have adverse consequences for such supported crypto asset. For instance, all transactions in such supported crypto asset would have to be registered with the SEC or other foreign authority, or conducted in accordance with an exemption from registration, which could severely limit its liquidity, usability and transactability. Moreover, the networks on which such supported crypto assets are utilized may be required to be regulated as securities intermediaries, and subject to applicable rules, which could effectively render the network impracticable for its existing purposes. Further, it could draw negative publicity and a decline in the general acceptance of the crypto asset. Also, it may make it difficult for such supported crypto asset to be traded, cleared, and custodied as compared to other crypto assetassets that are not considered to be securities. Specifically, even if transactions in a crypto asset were registered with the SEC or conducted in accordance with an exemption from registration, the current intermediary-based framework for securities trading, clearance and settlement is not consistent with the operations of the crypto asset market. For example, under current SEC guidance, crypto asset securities cannot be held on behalf of customers by broker-dealers that also support custody of traditional securities; and the SEC has not permitted public permissionless blockchain-based clearance and settlement systems for securities.

We rely on third parties in connection with many aspects of our business, including payment processors, banks, and payment gateways to process transactions; cloud computing services and data centers that provide facilities, infrastructure, website functionality and access, components, and services, including databases and data center facilities and cloud computing; as well as third parties that provide outsourced customer service, compliance support and product development functions, which are critical to our operations. Because we rely on third parties to provide these services and to facilitate certain of our business activities, we face increased operational risks. We do not directly manage the operation of any of these third parties, including their data center facilities that we use. These third parties may be subject to financial, legal, regulatory, and labor issues, cybersecurity incidents, break-ins, computer viruses, denial-of-service attacks, sabotage, acts of vandalism, privacy breaches, service terminations, disruptions, interruptions, and other misconduct. They are also vulnerable to damage or interruption from human error, power loss, telecommunications failures, fires, floods, earthquakes, hurricanes, tornadoes, pandemics (including the COVID-19 pandemic) and similar events. For example, on February 24, 2021, the U.S. Federal Reserve’s payments network experienced an outage, which had the potential to result in reduced functionality for certain of our products. In addition, these third parties may breach their agreements with us, disagree with our interpretation of contract terms or applicable laws and regulations, refuse to continue or renew these agreements on commercially reasonable terms or at all, fail or refuse to process transactions or provide other services adequately, take actions that degrade the functionality of our services, impose additional costs or requirements on us or our customers, or give preferential treatment to competitors. There can be no assurance that third parties that provide services to us or to our customers on our behalf will continue to do so on acceptable terms, or at all. If any third parties do not adequately or appropriately provide their services or perform their responsibilities to us or our customers on our behalf, such as if third-party service providers to close their data center facilities without adequate notice, are unable to restore operations and data, fail to perform as expected, or experience other unanticipated problems, we may be unable to procure alternatives in a timely and efficient manner and on acceptable terms, or at all, and we may be subject to business disruptions, losses or costs to remediate any of the deficiencies, customer dissatisfaction, reputational damage, legal or regulatory proceedings, or other adverse consequences which could harm our business.

We rely on bank accounts to provide our platform and custodial services. In particular, customer cash holdings on our platform are held with one or more of our multiple banking partners. As a registered money services business with FinCEN under the Bank Secrecy Act, as amended by the USA PATRIOT Act of 2001, and its implementing regulations enforced by FinCEN, or collectively, the BSA, a licensed money transmitter in a number of U.S. states and territories, a licensee under NYDFS’s Virtual Currency Business Activity regime, commonly referred to as a BitLicense, a licensed electronic money institution under both the U.K. Financial Conduct Authority and the Central Bank of Ireland, and a limited purpose trust company chartered by the NYDFS, our banking partners view us as a higher risk customer for purposes of their anti-money laundering programs. We may face difficulty establishing or maintaining banking relationships due to our banking partners’ policies and some prior bank partners have terminated their relationship with us or have limited access to bank services. The loss of these banking partners or the imposition of operational restrictions by these banking partners and the inability for us to utilize other redundant financial institutions may result in a disruption of business activity as well as regulatory risks. In addition, as a result of the myriad of regulations, the risks of crypto assets generally, or the adverse reputational impact of the 2022 Events on our industry, financial institutions in the United States and globally may as a result of the myriad of regulations or the risks of crypto assets generally, decide to not provide, or be prohibited from providing, account, custody, or other financial services to us or the cryptoeconomy generally. Further, we have existing redundancies in U.S. and global financial institutions that work with crypto companies with which we engage. However, if these financial institutions limit or end their cryptomarket activity, or if banking relationships become severely limited or unavailable to cryptomarket participants in a certain country, there could be temporary delays in or unavailability of services in such country that are critical to our operations, developers or customers, a further limit on available vendors, reduced quality in services we, our developers or our customers are able to obtain, and a general disruption to the cryptoeconomy, potentially leading to reduced activity on our platform which may adversely impact our business, operating results, and financial condition.

We also rely on insurance carriers to insure customer losses resulting from a breach of our physical security, cyber security, or by employee or service provider theft. Our ability to maintain crime, specie, and cyber insurance is subject to the insurance carriers’ ongoing underwriting criteria and our inability to obtain and maintain appropriate insurance coverage could cause a substantial business disruption, adverse reputational impact, inability to compete with our competitors, and regulatory scrutiny.

Our reputation and ability to attract and retain customers and grow our business depends on our ability to operate our service at high levels of reliability, scalability, and performance, including the ability to process and monitor, on a daily basis, a large number of transactions that occur at high volume and frequencies across multiple systems. Our platform, the ability of our customers to trade, and our ability to operate at a high level, are dependent on our ability to access the blockchain networks underlying the supported crypto assets, for which access is dependent on our systems’ ability to access the internet. Further, the successful and continued operations of such blockchain networks will depend on a network of computers, miners, or validators, and their continued operations, all of which may be impacted by service interruptions.

Our systems, the systems of our third-party service providers and partners, and certain crypto asset and blockchain networks have experienced from time to time, and may experience in the future service interruptions or degradation because of hardware and software defects or malfunctions, distributed denial-of-service and other cyberattacks, insider threats, break-ins, sabotage, human error, vandalism, earthquakes, hurricanes, floods, fires, and other natural disasters, power losses, disruptions in telecommunications services, fraud, military or political conflicts, terrorist attacks, computer viruses or other malware, or other events. In addition, extraordinary Trading Volumes or site usage could cause our computer systems to operate at an unacceptably slow speed or even fail. Some of our systems, including systems of companies we have acquired, or the systems of our third-party service providers and partners are not fully redundant, and our or their disaster recovery planning may not be sufficient for all possible outcomes or events.

Because we are a regulated financial institution in certain jurisdictions, interruptions have resulted and in the future may result in regulatory scrutiny, and significant or persistent interruptions could lead to significant fines and penalties, and mandatory and costly changes to our business practices, and ultimately could cause us to lose existing licenses or banking relationships that we need to operate or prevent or delay us from obtaining additional licenses that may be required for our business.

In addition, we are continually improving and upgrading our information systems and technologies. Implementation of new systems and technologies is complex, expensive, time-consuming, and may not be successful. If we fail to timely and successfully implement new information systems and technologies, or improvements or upgrades to existing information systems and technologies, or if such systems and technologies do not operate as intended, it could have an adverse impact on our business, internal controls (including internal controls over financial reporting), operating results, and financial condition.

As of December 31, 2021,2022, we held $278a combined $80.5 billion in custodial fiat currencies and cryptocurrencies on behalf of customers. Supported crypto assets are not insured or guaranteed by any government or government agency. We have also entered into partnerships or joint ventures with third parties, such as with the Centre Consortium, as a resellerissuer of USDC, where we or our partners receive and hold funds for the benefit of our customers.customer funds. Our and our partners’ abilities to manage and accurately safeguard these customer assets and the crypto assets we hold for our own investment and operating purposes requires a high level of internal controls. As our business continues to grow and we expand our product and service offerings, we must continue to strengthen our associated internal controls and ensure that our partners do the same. Our success and the success of our offerings requires significant public confidence in our and our partners’ ability to properly manage customers’ balances and handle large and growing transaction volumes and amounts of customer funds. In addition, we are dependent on our partners’ operations, liquidity, and financial condition for the proper maintenance, use, and safekeeping of these customer assets. AnyWe believe our policies and procedures protect us from material risks surrounding the safeguarding of crypto assets, audited ledgering of customer funds and corporate assets, and conflicts of interest. However, any material failure by us or our partners to maintain the necessary controls, policies, procedures or to manage the crypto assets we hold for our own investment and operating purposes could adversely impact our business, operating results, and financial condition. Further, any material failure by us or our partners to maintain the necessary controls or to manage customer crypto assets and funds appropriately and in compliance with applicable regulatory requirements could result in reputational harm, litigation, regulatory enforcement actions, significant financial losses, lead customers to discontinue or reduce their use of our and our partners’ products, and result in significant penalties and fines and additional restrictions, which could adversely impact our business, operating results, and financial condition. Moreover, because custodially held crypto assets may be considered to be the property of a bankruptcy estate, in the event of a bankruptcy, the crypto assets we hold in custody on behalf of our customers could be subject to bankruptcy proceedings and such customers could be treated as our general unsecured creditors. This may result in customers finding our custodial services more risky and less attractive and any failure to increase our customer base, discontinuation or reduction in use of our platform and products by existing customers as a result could adversely impact our business, operating results, and financial condition.

We deposit, transfer, and custody customer cash and crypto assets in multiple jurisdictions. In each instance, we are requiredrequire bank-level security encryption to safeguard customers’ assets using bank-level security standards applicable tofor our wallet and storage systems, as well as our financial management systems related to such custodial functions. Our security technology is designed to prevent, detect, and mitigate inappropriate access to our systems, by internal or external threats. We believe we have developed and maintained administrative, technical, and physical safeguards designed to comply with applicable legal requirements and industry standards. However, it is nevertheless possible that hackers, employees or service providers acting contrary to our policies, or others could circumvent these safeguards to improperly access our systems or documents, or the systems or documents of our business partners, agents, or service providers, and improperly access, obtain, misuse customer crypto assets and funds. The methods used to obtain unauthorized access, disable, or degrade service or sabotage systems are also constantly changing and evolving and may be difficult to anticipate or detect for long periods of time. Certain of our customer contracts do not limit our liability with respect to security breaches and other security-related matters and our insurance coverage for such impropriety is limited and may not cover the extent of loss nor the nature of such loss, in which case we may be liable for the full amount of losses suffered, which could be greater than all of our assets. Our ability to maintain insurance is also subject to the insurance carriers’ ongoing underwriting criteria. Any loss of customer cash or crypto assets could result in a subsequent lapse in insurance coverage, which could cause a substantial business disruption, adverse reputational impact, inability to compete with our competitors, and regulatory investigations, inquiries, or actions. Additionally, transactions undertaken through our websites or other electronic channels may create risks of fraud, hacking, unauthorized access or acquisition, and other deceptive practices. Any security incident resulting in a compromise of customer assets could result in substantial costs to us and require us to notify impacted individuals, and in some cases regulators, of a possible or actual incident, expose us to regulatory enforcement actions, including substantial fines, limit our ability to provide services, subject us to litigation, significant financial losses, damage our reputation, and adversely affect our business, operating results, financial condition, and cash flows.

Crypto assets are generally controllable only by the possessor of the unique private key relating to the digital wallet in which the crypto assets are held. While blockchain protocols typically require public addresses to be published when used in a transaction, private keys must be safeguarded and kept private in order to prevent a third party from accessing the crypto assets held in such a wallet. To the extent that any of the private keys relating to our wallets containing crypto assets held for our own account or for our customers is lost, destroyed, or otherwise compromised or unavailable, and no backup of the private key is accessible, we will be unable to access the crypto assets held in the related wallet. Further, we cannot provide assurance that our wallet will not be hacked or compromised. Crypto assets and blockchain technologies have been, and may in the future be, subject to security breaches, hacking, or other malicious activities. Any loss of private keys relating to, or hack or other compromise of, digital wallets used to store our customers’ crypto assets could adversely affect our customers’ ability to access or sell their crypto assets, require us to reimburse our customers for their losses, and subject us to significant financial losses in addition to losing customer trust in us and our products. As such, any loss of private keys due to a hack, employee or service provider misconduct or error, or other compromise by third parties could hurt our brand and reputation, result in significant losses, and adversely impact our business. The total value of crypto assets in our possession and control is significantly greater than the total value of insurance coverage that would compensate us in the event of theft or other loss of funds, which could cause our business, operating results, and financial condition to be adversely impacted in the event of such uninsured loss.

Our success depends on our ability to retain existing customers and attract new customers, including ecosystem partners,developers, to increase engagement with our products, services, and platform. To do so, we must continue to offer leading technologies and ensure that our products and services are secure, reliable, and engaging. We must also expand our products and services, and offer competitive prices in an increasingly crowded and price-sensitive market. There is no assurance that we will be able to continue to do so, that we will be able to retain our current customers or attract new customers, or keep our customers engaged. Any number of factors can negatively affect customer retention, growth, and engagement, including if:

From time to time, certain of these factors have negatively affected customer retention, growth, and engagement to varying degrees. If we are unable to maintain or increase our customer base and customer engagement, our revenue and financial results may be adversely affected. Any decrease in user retention, growth, or engagement could render our products and services less attractive to customers, which may have an adverse impact on our revenue, business, operating results, and financial condition. If our customer growth rate slows or declines, we will become increasingly dependent on our ability to maintain or increase levels of user engagement and monetization in order to drive growth of revenue.

We anticipate that ourOur operating expenses willmay increase substantially in the foreseeable future as we continue to hire additional employees,attract and retain talent, expand our sales and marketing efforts, develop additional products and services, and expand our international business. Moreover, we expectbusiness, and in connection with certain expenses related to incur significant legal, accounting, and other expenses, including substantially higher costs to obtain and maintain director and officer liability insurance,operating as a result of being a public company. ThisWhile we consistently evaluate opportunities to reduce our operating costs and optimize efficiencies, including, for example, through our workforce reductions in June 2022 and January 2023, we cannot guarantee that these efforts will be successful or that we will not re-accelerate operating expenditures in the future in order to capitalize on growth opportunities. Our operations may prove more expensive than we currently anticipate, and we may not succeed in increasing our net revenue sufficiently to offset these higher expenses. Our revenue growth may slow, or ourand net revenue may continue to decline for a number of other reasons, including reduced demand for our offerings, increased competition, adverse macroeconomic conditions, a decrease in the growth or size of the cryptoeconomy, or any failure to capitalize on growth opportunities. Any failure to increase our revenue could prevent us from achieving profitability. We cannot be certain that we will be able to achieve profitability or achieve positive operating cash flow on any quarterly or annual basis. If we are unable to effectively manage these risks and difficulties as we encounter them, our business, operating results, and financial condition may suffer.

We have significantly expanded our operationsexperienced a period of significant growth in recent years, both in terms of employee headcount as well asand customer growth, followed by the numberscaling back of customers. For example, we have grown from 1,249 employees as of December 31, 2020our business in response to 3,730 employees as of December 31, 2021. We expect such growth to continue for the foreseeable future.changing economic conditions throughout 2022. As we grow, our business changes, it becomes increasingly complex. To effectively manage and capitalize on our growth periods, we must continueneed to expandmanage headcount, capital and processes efficiently while making investments such as expanding our information technology and financial, operating, and administrative systems and controls,controls. Growth and continue to manage headcount, capital, and processes efficiently. Our continued growthscaling back initiatives could strain our existing resources, and we could experience ongoing operating difficulties in managing our business as it expands across numerous jurisdictions, including difficulties in hiring, training, managing and managingretaining a diffuseremote and growingevolving employee base. Failure to scale and preserve our company culture could harm our future success, including our ability to retain and recruit personnel and to effectively focus on and pursue our corporate objectives. If we do not adapt or scale to meet these evolving challenges, or if our management team does not effectively scale with our growth, we may experience erosion to our brand, the quality of our products and services may suffer, and our company culture may be harmed. Moreover, the failure of our systems and processes could undermine our ability to provide accurate, timely, and reliable reports on our financial and operating results, including the financial statements provided herein, and could impact the effectiveness of our internal controls over financial reporting. In addition, our systems and processes may not prevent or detect all errors, omissions, or fraud. Any of the foregoing operational failures could lead to noncompliance with laws, loss of operating licenses or other authorizations, or loss of bank relationships that could substantially impair or even suspend company operations.

Successful implementation of our growth strategy will also require significant expenditures before any substantial associated revenue is generated and we cannot guarantee that these increased investments will result in corresponding and offsetting revenue growth. Because we have a limited history operating our business at its current scale, it is difficult to evaluate our current business and future prospects, including our ability to plan for and model future growth. Our limited operating experience at this scale, combined with the rapidly evolving nature of the crypto asset market in which we operate, substantial uncertainty concerning how these markets may develop, and other economic factors beyond our control, reduces our ability to accurately forecast quarterly or annual revenue.

Additionally, from time to time, we realign our resources and talent to implement stage-appropriate business strategies, including furloughs, layoffs and reductions in force. For example, in June 2022 and in January 2023, in response to rapidly changing economic conditions and in an effort to reduce our operational costs and improve our organizational efficiency, we reduced our workforce. If there are unforeseen expenses associated with such realignments in our business strategies, and we incur unanticipated charges or liabilities, then we may not be able to effectively realize the expected cost savings or other benefits of such actions. Failure to manage any growth or any scaling back of our future growth effectivelyoperations could have an adverse effect on our business, operating results, and financial condition.

We have taken, and expect to continue to take, actions that we believe are in the best interests of our customers and the long-term interests of our business, even if those actions do not necessarily maximize short-term or medium-term results. These include expending significant managerial, technical, and legal efforts on complying with laws and regulations that are applicable to our products and services and ensuring that our products are secure. We also focus on driving long-term engagement with our customers through innovation and developing new industry-leading products and technologies. These decisions may not be consistent with the short-term and medium-term expectations of our stockholders and may not produce the long-term benefits that we expect, which could have an adverse effect on our business, operating results, and financial condition.

A relatively small number of institutional market makers and high-transaction volume retailconsumer customers account for a significant amount of the Trading Volume on our platform and our net revenue. We expect significant Trading Volume and net revenue attributable to these customers for the foreseeable future. As a result, a loss of these customers, or a reduction in their Trading Volume, and our inability to replace these customers with other customers, could have an adverse effect on our business, operating results, and financial condition.

We began our operations in 2012 and since then our business model has continued to evolve. Our net revenue has significantly grown since our formation, but there is no assurance that this growth rate will continue in future periods and you should not rely on the revenue growth of any given prior quarterly or annual period as an indication of our future performance. We may not always generate sufficientFor example, while we generated $7.4 billion and $1.1 billion in total net revenue for the years ended December 31, 2021 and December 31, 2020, respectively, our total net revenue for the year ended December 31, 2022 was $3.1 billion, representing a decline of 57% compared to achieve positive cash flow from operations or profitabilitythe prior year, primarily due to declining crypto prices, lower crypto asset volatility, and uncertainty in any giventhe cryptoeconomy following the 2022 Events. If our total net revenue were to further decline significantly for an extended period of time, our business, operating results and ourfinancial condition could be adversely affected. Our limited operating history and the volatile nature of our business make it difficult to evaluate our current business and our future prospects. For instance, although we generated net income of $322.3 million in 2020, we incurred a net loss of $30.4 million in 2019. We have encountered and will continue to encounter risks and difficulties as described in this section. If we do not manage these risks successfully, our business may be adversely impacted. If our growth rate were to decline significantly or become negative, it could adversely affect our operating results and financial condition. If we are not able to achieve or maintain positive cash flow from operations, our business may be adversely impacted and we may require additional financing, which may not be available on favorable terms or at all, or which would be dilutive to our stockholders.

We currently have subsidiaries in the United Kingdom, Japan, Singapore, Brazil, Canada, Germany, the Cayman Islands, the Philippines, Ireland, India, Kenya, Israel,States and Australia, as well as the United States.abroad. We plan to enter into or increase our presence in additional markets around the world. We have a limited operating history outside the United States, and our ability to manage our business and conduct our operations internationally requires considerable management attention and resources and is subject to particular challenges of supporting a rapidly growing business in an environment of diverse cultures, languages, customs, tax laws, legal systems, alternate dispute systems, and regulatory systems. As we continue to expand our business and customer base outside the United States, we will be increasingly susceptible to risks associated with international operations. These risks and challenges include:

We have limited experience with international regulatory environments and market practices and may not be able to penetrate or successfully operate in the markets we choose to enter. In addition, we may incur significant expenses as a result of our international expansion, and we may not be successful. We may face limited brand recognition in certain parts of the world that could lead to non-acceptance or delayed acceptance of our products and services by customers in new markets. We may also face challenges in complying with local laws and regulations. Our failure to successfully manage these risks could harm our international operations and have an adverse effect on our business, operating results, and financial condition.

From time to time we have been, and may in the future be, subject to claims and disputes with our customers with respect to our products and services, such as regarding the execution and settlement of crypto asset trades, fraudulent or unauthorized transactions, account takeovers, deposits and withdrawals of crypto assets, failures or malfunctions of our systems and services, or other issues relating to our products services. For example, during periods of heavy Trading Volumes, we have received increased customer complaints. Additionally, the ingenuity of criminal fraudsters, combined with many retailconsumer users’ susceptibility to fraud, may cause our customers to be subject to ongoing account takeovers and identity fraud issues. While we have taken measures to detect and reduce the risk of fraud, there is no guarantee that they will be successful and, in any case, require continuous improvement and optimization for continually evolving forms of fraud to be effective. There can be no guarantee that we will be successful in detecting and resolving these disputes or defending ourselves in any of these matters, and any failure may result in impaired relationships with our customers, damage to our brand and reputation, and substantial fines and damages. In some cases, the measures we have implemented to detect and deter fraud have led to poor customer experiences, including indefinite account inaccessibility for some of our customers, which increases our customer support costs and can compound damages. We could incur significant costs in compensating our customers, such as if a transaction was unauthorized, erroneous, or fraudulent. We could also incur significant legal expenses resolving and defending claims, even those without merit. To the extent we are found to have failed to fulfill our regulatory obligations, we could also lose our authorizations or licenses or become subject to conditions that could make future operations more costly, impair our ability to grow, and adversely impact our operating results. We currently are, and may in the future become, subject to investigation and enforcement action by state, federal, and international retailconsumer protection agencies, including the CFPB,Consumer Financial Protection Bureau (the “CFPB”), the FTC,Federal Trade Commission (the “FTC”), state attorneys general in the United States, the U.K. Financial Conduct Authority, the U.K. Financial Ombudsman Service, and the U.K. Office of Fair Trading, each of which monitors customer complaints against us and, from time to time, escalates matters for investigation and potential enforcement against us.

While certain of our customer agreements contain arbitration provisions with class action waiver provisions that may limit our exposure to retailconsumer class action litigation, some federal, state, and foreign courts have refused or may refuse to enforce one or more of these provisions, and there can be no assurance that we will be successful in enforcing these arbitration provisions, including the class action waiver provisions, in the future or in any given case. Legislative, administrative, or regulatory developments may directly or indirectly prohibit or limit the use of pre-dispute arbitration clauses and class action waiver provisions. Any such prohibitions or limitations on or discontinuation of the use of such arbitration or class action waiver provisions could subject us to additional lawsuits, including additional retailconsumer class action litigation, and significantly limit our ability to avoid exposure from retailconsumer class action litigation.

Our ability to make payments on our indebtedness, including the 2026 Convertible Notes and Senior Notes, and our other obligations will depend on our financial and operating performance, which is subject to prevailing economic and competitive conditions and to certain financial, business and other factors beyond our control. We may be unable to attain a level of cash flows from operating activities sufficient to permit us to pay the principal, premium, if any, and interest on our indebtedness, including each series of the 2026 Convertible Notes and Senior Notes, and other obligations.

If we are unable to service our debt and other obligations from cash flows, we may need to refinance or restructure all or a portion of our debt obligations prior to maturity. Our ability to refinance or restructure our debt and other obligations will depend upon the condition of the capital markets and our financial condition at such time. Any refinancing or restructuring could be at higher interest rates and may require us to comply with more onerous covenants, which could further restrict our business operations. If our cash flows are insufficient to service our debt and other obligations, we may not be able to refinance or restructure any of these obligations on commercially reasonable terms or at all and any refinancing or restructuring could have a material adverse effect on our business, operating results, or financial condition. Statutory, contractual or other restrictions may also limit our subsidiaries’ ability to pay dividends or make distributions, loans or advances to us. For these reasons, we may not have access to any assets or cash flows of our subsidiaries to make interest and principal payments on each series of the 2026 Convertible Notes and Senior Notes.

We have a substantial amount of indebtedness and other obligations. As of December 31, 2021,2022, we had approximately $3.44 billion in aggregate principal amount of outstanding long-term indebtedness (excluding crypto asset borrowings), which includes $2.0 billion of our Senior Notes and $1.44 billion of our 2026 Convertible Notes.

We provide retailconsumer and commercial loans to qualified customers secured by their crypto or fiat asset holdings on our platform, which exposes us to the risk of our borrowers’ inability to repay such loans. In addition, such activity results in us being subject to certain lending laws and regulations in the applicable jurisdiction and as a result we may be subject to additional regulatory scrutiny. In the future we may enter into credit arrangements with financial institutions to obtain more capital. Any termination or interruption in the financial institutions’ ability to lend to us could interrupt our ability to provide capital to qualified customers to the extent we rely on such credit lines to continue to offer or to grow such products. Further, our credit decisionapproval process, and underwriting, pricing, loss forecasting, and scoring models used to evaluate loan applications may contain errors or may not adequately assess creditworthiness of our borrowers, or may be otherwise ineffective, resulting in incorrect approvals or denials of loans. It is also possible that loan applicants could provide false or incorrect information.

Borrower loan loss rates may be significantly affected by economic downturns or general economic conditions beyond our control and beyond the control of individual borrowers. In particular, loss rates on loans may increase due to factors such as prevailing market conditions in the cryptoeconomy, the price of Bitcoin and other crypto assets, which have experienced significant fluctuations, the amount of liquidity in the markets, and other factors. Borrowers may seek protection under federal bankruptcy law or similar laws. If a borrower of a loan files for bankruptcy (or becomes the subject of an involuntary petition), a stay willmay go into effect that will automatically put any pending collection actions on the loan on hold and prevent further collection action absent bankruptcy court approval. The efficacy of our security interest in customer collateral is not guaranteed under Delawareapplicable state law or the Uniform Commercial Code and therefore we may be exposed to loss in the event of a customer default, even if we appear to be secured against such default. While we have not incurred any material losses to date, if any of the foregoing events were to occur, our reputation and relationships with borrowers, and our financial results, could be harmed. We intend to continue to explore other products, models, and structures for offering retailconsumer and commercial financing, and other forms of credit and loan products. Some of those models or structures may require, or be deemed to require, additional data, procedures, partnerships, licenses, regulatory approvals, or capabilities that we have not yet obtained or developed.

Certain of our products and services are paid for by electronic transfer from bank accounts which exposes us to risks associated with returns and insufficient funds. Furthermore, some of our products and services are paid for by credit and debit cards through payment processors which exposes us to risks associated with chargebacks and refunds. These claims could arise from fraud, misuse, unintentional use, settlement delay, insufficiency of funds, or other activities. Also, criminals are using increasingly sophisticated methods to engage in illegal activities, such as counterfeiting and fraud. If we are unable to collect such amounts from the customer, or if the customer refuses or is unable, due to bankruptcy or other reasons, to reimburse us, we bear the loss for the amount of the chargeback, refund, or return.

While we have policies and procedures to manage and mitigate these risks, we cannot be certain that such processes will be effective. Our failure to limit chargebacks and fraudulent transactions could increase the number of returns, refunds and chargebacks that we have to process. In addition, if the number of returns, refunds and chargebacks increases, card networks or our banking partners could require us to increase reserves, impose penalties on us, charge additional or higher fees, or terminate their relationships with us. Failure to effectively manage risk and prevent fraud could increase our chargeback, refund, and return losses or cause us to incur other liabilities. Increases in chargebacks, refunds, returns, or other liabilities could have an adverse effect on our operating results, financial condition, and cash flows.

In connection with our prime brokeragePrime trading service, we routinely route customer orders to third-party exchanges or other trading venues. In connection with these activities, we generally hold cash and other crypto assets with such third-party exchanges or other trading venues in order to effect customer orders. If we were to experience a disruption in our access to these third-party exchanges and trading venues, our prime brokeragePrime trading service could be adversely affected to the extent that we are limited in our ability to execute order flow for our prime brokeragePrime customers. In addition, while we have policies and procedures to help mitigate our risks related to routing orders through third-party trading venues, if any of these third partythird-party trading venues experience any technical, legal, regulatory or other adverse events, such as shutdowns, delays, system failures, suspension of withdrawals, illiquidity, insolvency, or loss of customer assets, we might not be able to fully recover the cash and other crypto assets that we have deposited with these third parties.parties, and these risks may be heightened following the 2022 Events. For example, in connection with the 2022 Events, we were not able to recover an immaterial amount of cash deposited at FTX. As a result, our business, operating results and financial condition could be adversely affected.

As part of our business strategy, we have madehistorically been highly active in acquiring and intendinvesting in order to, continue making acquisitions toamong other things, add specialized employees, complementary companies, products, services, licenses, or technologies. WeWhile in 2022, we reduced our activity with respect to acquisitions and investments due to market conditions, we may still from time to time make further acquisitions and investments. As part of our business strategy, we continue to routinely conduct discussions and evaluate opportunities for possible acquisitions, strategic investments, entries into new businesses, joint ventures, and other transactions. As we grow,In the future, the pace and scale of our acquisitions may increase and may include larger acquisitions than we have done historically. We also invest in companies and technologies, many of which are private companies and technologies that are highly speculative in nature. In the future, we may not be able to find other suitable acquisition and investment candidates, and we may not be able to complete acquisitions or make investments on favorable terms, if at all. In some cases, the costs of such acquisitions may be substantial, and there is no assurance that we will receive a favorable return on investment for our acquisitions. We may in the future be required to write off acquisitions or investment.investments. For example, we recorded gross impairment charges of $101.4 million on our strategic investments in various companies and technologies for the year ended December 31, 2022, primarily as a result of adverse economic conditions in 2022. To the extent the adverse economic conditions continue for a prolonged period, our strategic investments could be further impaired. Moreover, our previous and future acquisitions may not achieve our goals, and any future acquisitions we complete could be viewed negatively by customers, developers, advertisers, or investors. For example, in February 2019, we announced the acquisition of Neutrino S.r.l., a blockchain intelligence platform, whose founders were directly affiliated with the software firm the Hacking Team, which purportedly sold software with surveillance capabilities to governments with authoritarian regimes, resulting in reputational harm to our business, a loss of customers, and increased cost. In addition, if we fail to successfully close or integrate any acquisitions, or integrate the products or technologies associated with such acquisitions into our company, our net revenue and operating results could be adversely affected. Our ability to acquire and integrate companies, products, services, licenses, employees, or technologies in a successful manner is unproven. Any integration process may require significant time and resources, and we may not be able to manage the process successfully, including successfully securing regulatory approvals which may be required to close the transaction and to continue to operate the target firm’s business or products in a manner that is useful to us. We may not successfully evaluate or utilize the acquired products, services, technology, or personnel, or accurately forecast the financial impact of an acquisition transaction, including accounting charges. We may have to pay cash, incur debt, or issue equity securities to pay for any such acquisition, any of which could adversely affect our financial results. The sale of equity or issuance of debt to finance any such acquisitions could result in dilution to our stockholders, which, depending on the size of the acquisition, may be significant. The incurrence of indebtedness would result in increased fixed obligations and could also include covenants or other restrictions that would impede our ability to manage our operations.

Our brand and reputation are key assets and a competitive advantage. Maintaining, protecting, and enhancing our brand depends largely on the success of our marketing efforts, ability to provide consistent, high-quality, and secure products, services, features, and support, and our ability to successfully secure, maintain, and defend our rights to use the “Coinbase” mark and other trademarks important to our brand. We believe that the importance of our brand will increase as competition further intensifies. Our brand and reputation could be harmed if we fail to achieve these objectives or if our public image were to be tarnished by negative publicity, unexpected events, or actions by third parties. Unfavorable publicity about us, including our products, services, technology, customer service, personnel, and crypto asset or crypto asset platforms generally could diminish confidence in, and the use of, our products and services. Moreover, to the extent that we acquire a company and maintain that acquired company’s separate brand, we could experience brand dilution or fail to retain positive impressions of our own brand to the extent such impressions are instead attributed to the acquired company’s brand. In addition, because we are a founder-led company, actions by, or unfavorable publicity about, Brian Armstrong, our co-founder and Chief Executive Officer, may adversely impact our brand and reputation. Such negative publicity also could have an adverse effect on the size and engagement of our customers and could result in decreased revenue, which could have an adverse effect on our business, operating results, and financial condition.

We regularly review key business metrics, including the number of our Verified Users and MTUs, our Trading Volume and Assets on Platform, and other measures to evaluate growth trends, measure our performance, and make strategic decisions. These key metrics are calculated using both internal company data and third-party data and have not been validated by an independent third-party. While these numbers are based on what we currently believe to be reasonable estimates for the applicable period of measurement at the time of reporting, there are inherent challenges in such measurements. If we fail to maintain an effective analytics platform, our key metrics calculations may be inaccurate, and we may not be able to identify those inaccuracies. Additionally, while we believe the third-party data we use is reliable, we have not independently verified the accuracy or completeness of the data contained in such sources and we cannot be assured that such data is free of error. Any inaccuracy in the third-party data we use could cause us to overstate or understate our key metrics. We regularly review our processes for calculating these metrics, and from time to time we make adjustments to improve their accuracy. Additionally, certain of our key business metrics, including Verified Users and MTUs, are measured at a point in time and as our products and internal processes for calculating these metrics evolve over time, a previously reported number could fluctuate. We generally will not update previously disclosed key business metrics for any such inaccuracies or adjustments that are immaterial.

Our key business metrics may also be impacted by compliance or fraud-related bans, technical incidents, or false or spam accounts in existence on our platform. We regularly deactivate fraudulent and spam accounts that violate our terms of service, and exclude these users from the calculation of our key business metrics; however, we may not succeed in identifying and removing all such accounts from our platform. Additionally, users are not prohibited from having more than one account and both our Verified Users and MTU metrics may overstate the number of unique customers who have registered an account on our platform as one customer may register for, and use, multiple accounts with different email addresses, phone numbers, or usernames. Furthermore, MTUs may overstate the number of unique retail usersconsumers due to differences in product architecture.architecture or user behavior, which may cause MTUs to fluctuate. For example, a user may currently have a Coinbase Wallet account that is unlinked to their registered account on our platform, but then choose to link these accounts in the future as our product offerings evolve. To the extent that the user had activity in both their Wallet and their registered account in the measurement period, what was previously captured as two unique MTUs would now be counted as a single MTU. If our metrics provide us with incorrect or incomplete information about users and their behavior, we may make inaccurate conclusions about our business.

We receive a high degree of media coverage in the cryptoeconomy and around the world. Unfavorable publicity regarding, for example, our product changes, product quality, litigation or regulatory activity, privacy practices, terms of service, employment matters, the use of our products, services, or supported crypto assets for illicit or objectionable ends, the actions of our customers, or the actions of other companies that provide similar services to ours, has in the past, and could in the future, adversely affect our reputation. Further, we have in the past, and may in the future, be the target of social media campaigns criticizing actual or perceived actions or inactions that are disfavored by our customers, employees, or society at-large, which campaigns could materially impact our customers’ decisions to trade on our platform. Any such negative publicity could have an adverse effect on the size, activity, and loyalty of our customers and result in a decrease in net revenue, which could adversely affect our business, operating results, and financial condition.

Our platform may be exploited to facilitate illegal activity including fraud, money laundering, gambling, tax evasion, and scams. We or our partners may be specifically targeted by individuals seeking to conduct fraudulent transfers, and it may be difficult or impossible for us to detect and avoid such transactions in certain circumstances. The use of our platform for illegal or improper purposes could subject us to claims, individual and class action lawsuits, and government and regulatory investigations, prosecutions, enforcement actions, inquiries, or requests that could result in liability and reputational harm for us. Moreover, certain activities that may be legal in one jurisdiction may be illegal in another jurisdiction, and certain activities that are at one time legal may in the future be deemed illegal in the same jurisdiction. As a result, there is significant uncertainty and cost associated with detecting and monitoring transactions for compliance with local laws. In the event that a customer is found responsible for intentionally or inadvertently violating the laws in any jurisdiction, we may be subject to governmental inquiries, enforcement actions, prosecuted, or otherwise held secondarily liable for aiding or facilitating such activities. Changes in law have also increased the penalties for money transmitters for certain illegal activities, and government authorities may consider increased or additional penalties from time to time. Owners of intellectual property rights or government authorities may seek to bring legal action against money transmitters, including us, for involvement in the sale of infringing or allegedly infringing items. Any threatened or resulting claims could result in reputational harm, and any resulting liabilities, loss of transaction volume, or increased costs could harm our business.

Moreover, while fiat currencies can be used to facilitate illegal activities, crypto assets are relatively new and, in many jurisdictions, may be lightly regulated or largely unregulated. Many types of crypto assets have characteristics, such as the speed with which digital currency transactions can be conducted, the ability to conduct transactions without the involvement of regulated intermediaries, the ability to engage in transactions across multiple jurisdictions, the irreversible nature of certain crypto asset transactions, and encryption technology that anonymizes these transactions, that make crypto assets susceptible to use in illegal activity. U.S. federal and state and foreign regulatory authorities and law enforcement agencies, such as the Department of Justice, SEC, CFTC, FTC, or the Internal Revenue Service or the IRS,(“IRS”), and various state securities and financial regulators have taken and continue to take legal action against persons and entities alleged to be engaged in fraudulent schemes or other illicit activity involving crypto assets. We also support crypto assets that incorporate privacy-enhancing features, and may from time to time support additional crypto assets with similar functionalities. These privacy-enhancing crypto assets obscure the identities of sender and receiver, and may prevent law enforcement officials from tracing the source of funds on the blockchain. Facilitating transactions in these crypto assets may cause us to be at increased risk of liability arising out of anti-money laundering and economic sanctions laws and regulations.

Our ability to comply with applicable complex and evolving laws, regulations, and rules is largely dependent on the establishment, maintenance, and scaling of our compliance, audit, and reporting systems to continuously keep pace with our customer activity and transaction volume, as well as our ability to attract and retain qualified compliance and other risk management personnel. While we have devoted significant resources to develop policies and procedures to identify, monitor, and manage our risks, and expect to continue to do so in the future, we cannot assure you that our policies and procedures are and will always be effective or that we have been and will always be successful in monitoring or evaluating the risks to which we are or may be exposed in all market environments or against all types of risks, including unidentified or unanticipated risks. Our risk management policies and procedures rely on a combination of technical and human controls and supervision that are subject to error and failure. Some of our methods for managing risk are discretionary by nature and are based on internally developed controls and observed historical market behavior, and also involve reliance on standard industry practices. These methods may not adequately prevent losses, particularly as they relate to extreme market movements, which may be significantly greater than historical fluctuations in the market. Further, as a result of the 2022 Events or similar market disruptions in the future, we may reevaluate our risk management policies and procedures. Accordingly, in the future, we may identify gaps in such policies and procedures or existing gaps may become higher risk, and may require significant resources and management attention. Our risk management policies and procedures also may not adequately prevent losses due to technical errors if our testing and quality control practices are not effective in preventing failures. In addition, we may elect to adjust our risk management policies and procedures to allow for an increase in risk tolerance, which could expose us to the risk of greater losses.

Regulators periodically review our compliance with our own policies and procedures and with a variety of laws and regulations. We have received in the past and may from time to time receive additional examination reports citing violations of rules and regulations and inadequacies in existing compliance programs, and requiring us to enhance certain practices with respect to our compliance program, including due diligence, training, monitoring, reporting, and recordkeeping. If we fail to comply with these, or do not adequately remediate certain findings, regulators could take a variety of actions that could impair our ability to conduct our business, including, but not limited to, delaying, denying, withdrawing, or conditioning approval of certain products and services. In addition, regulators have broad enforcement powers to censure, fine, issue cease and desist orders, prohibit us from engaging in some of our business activities, or revoke our licenses. We face significant intervention by regulatory authorities, including extensive examination and surveillance activities, and will continue to face the risk of significant intervention by regulatory authorities in the future. In the case of non-compliance or alleged non-compliance, we could be subject to investigations and proceedings that may result in substantial penalties or civil lawsuits, including by customers, for damages which can be significant. Any of these outcomes would adversely affect our reputation and brand and our business, operating results, and financial condition. Some of these outcomes could adversely affect our ability to conduct our business.

We hold investments in various DeFi protocols. These protocols achieve their investment purposes through self-executing smart contracts that allow users to invest crypto assets in a pool from which other users can borrow without requiring an intermediate party to facilitate these transactions. These investments earn interest to the investor based on the rates at which borrowers repay the loan, and can generally be withdrawn with no restrictions. However, these DeFi protocols are subject to various risks, including the risk that the underlying smart contract is insecure, the risk that borrowers may default and the investor will not be able to recover its investment, the risk that any underlying collateral may experience significant volatility, and the risk of certain core developers with protocol administration rights can make unauthorized or harmful changes to the underlying smart contract. If any of these risks materialize, our investments in these DeFi protocols may be adversely impacted.

Crypto asset platforms are relatively new. Many of our competitors are unlicensed, unregulated, operate without supervision by any governmental authorities, and do not provide the public with significant information regarding their ownership structure, management team, corporate practices, cybersecurity, and regulatory compliance. As a result, customers and the general public may lose confidence or interest in crypto asset platforms, including regulated platforms like ours.

Since the inception of the cryptoeconomy, numerous crypto asset platforms have been sued, investigated, or shut down due to fraud, manipulative practices, business failure, and security breaches. In many of these instances, customers of these platforms were not compensated or made whole for their losses. Larger platforms like us are more appealing targets for hackers and malware, and may also be more likely to be targets of regulatory enforcement actions. For example, in February 2014, Mt. Gox, the then largest crypto asset platform worldwide, filed for bankruptcy protection in Japan after an estimated 700,000 Bitcoins were stolen from its wallets. In May 2019, Binance, one of the world’s largest platforms, was hacked, resulting in losses of approximately $40 million, and in February 2021, Bitfinex settled a long-running legal dispute with the State of New York related to Bitfinex’s alleged misuse of over $800 million of customer assets. The 2022 Events resulted in a loss of confidence in the broader cryptoeconomy, adverse reputational impact to crypto asset platforms, increased negative publicity surrounding crypto more broadly, heightened scrutiny by regulators and lawmakers and a call for increased regulations of crypto assets and crypto asset platforms.

In addition, there have been reports that a significant amount of crypto asset trading volume on crypto asset platforms is fabricated and false in nature, with a specific focus on unregulated platforms located outside the United States. Such reports may indicate that the market for crypto asset platform activities is significantly smaller than otherwise understood.

In order to own, transfer and use a crypto asset on its underlying blockchain network, a person must have a private and public key pair associated with a network address, commonly referred to as a “wallet.” Each wallet is associated with a unique “public key” and “private key” pair, each of which is a string of alphanumerical characters. To deposit crypto assets held by a customer onto our platform or custody platform, a customer must “sign” a transaction that consists of the private key of the wallet from where the customer is transferring crypto assets, the public key of a wallet that we control which we provide to the customer, and broadcast the deposit transaction onto the underlying blockchain network. Similarly, to withdraw crypto assets from our platform or custody platform, the customer must provide us with the public key of the wallet that the crypto assets are to be transferred to, and we would be required to “sign” a transaction authorizing the transfer. In addition, some crypto networks require additional information to be provided in connection with any transfer of crypto assets to or from our platforms. A number of errors can occur in the process of depositing or withdrawing crypto assets into or from our platform, such as typos, mistakes, or the failure to include the information required by the blockchain network. For instance, a user may incorrectly enter our wallet’s public key or the desired recipient’s public key when depositing and withdrawing from our platforms, respectively. Alternatively, a user may transfer crypto assets to a wallet address that hethe user does not own, control or hold the private keys to. In addition, each wallet address is only compatible with the underlying blockchain network on which it is created. For instance, a Bitcoin wallet address can only be used to send and receive Bitcoins. If any Ethereum or other crypto assets isare sent to a Bitcoin wallet address, or if any of the foregoing errors occur, all of the customer’s sent crypto assets will be permanently and irretrievably lost with no means of recovery. We have encountered and expect to continue to encounter similar incidents with our customers. Such incidents could result in customer disputes, damage to our brand and reputation, legal claims against us, and financial liabilities, any of which could adversely affect our business.

Moreover, we hold customer assets one-to-one at all times and we have procedures to process redemptions and withdrawals expeditiously, following the terms of the applicable user agreements. We have not experienced excessive redemptions or withdrawals, or prolonged suspended redemptions or withdrawals, of crypto assets to date. However, similar to traditional financial institutions, we may experience temporary process-related withdrawal delays. For example, we, and traditional financial institutions, may experience such delays if there is a significant volume of withdrawal requests that is vastly beyond anticipated levels. This does not mean we cannot or will not satisfy withdrawals, but this may mean a temporary delay in satisfying withdrawal requests, which we still expect to be satisfied within the withdrawal timelines set forth in the applicable user agreements. To the extent we have process-related delays, even if brief or due to blockchain network congestion, and within the terms of an applicable user agreement, we may experience increased customer complaints and damage to our brand and reputation and face additional regulatory scrutiny, any of which could adversely affect our business.

Blockchain protocols, including Bitcoin and Ethereum, are open source. Any user can download the software, modify it, and then propose that Bitcoin, Ethereum, or other blockchain protocols users and miners adopt the modification. When a modification is introduced and a substantial majority of users and miners consent to the modification, the change is implemented and the Bitcoin, Ethereum or other blockchain protocol networks, as applicable, remain uninterrupted. However, if less than a substantial majority of users and miners consent to the proposed modification, and the modification is not compatible with the software prior to its modification, the consequence would be what is known as a “fork” (i.e., “split”) of the impacted blockchain protocol network and respective blockchain, with one prong running the pre-modified software and the other running the modified software. The effect of such a fork would be the existence of two parallel versions of the Bitcoin, Ethereum, or other blockchain protocol network, as applicable, running simultaneously, but with each split network’s crypto asset lacking interchangeability.

Both Bitcoin and Ethereum protocols have been subject to “forks” that resulted in the creation of new networks, including Bitcoin Cash ABC, Bitcoin Cash SV, Bitcoin Diamond, Bitcoin Gold, Ethereum Classic, EthereumPOW, and others. Some of these forks have caused fragmentation among platforms as to the correct naming convention for forked crypto assets. Due to the lack of a central registry or rulemaking body, no single entity has the ability to dictate the nomenclature of forked crypto assets, causing disagreements and a lack of uniformity among platforms on the nomenclature of forked crypto assets, and which results in further confusion to customers as to the nature of assets they hold on platforms. In addition, several of these forks were contentious and as a result, participants in certain communities may harbor ill will towards other communities. As a result, certain community members may take actions that adversely impact the use, adoption, and price of Bitcoin, Ethereum, or any of their forked alternatives.

Furthermore, hard forks can lead to new security concerns. For instance, when the Ethereum and Ethereum Classic networks split in July 2016, replay attacks, in which transactions from one network were rebroadcast on the other network to achieve “double-spending,” plagued platforms that traded Ethereum through at least October 2016, resulting in significant losses to some crypto asset platforms. Similar replay attacks occurred in connection with the Bitcoin Cash and Bitcoin Cash SV network split in November 2018. Another possible result of a hard fork is an inherent decrease in the level of security due to the splitting of some mining power across networks, making it easier for a malicious actor to exceed 50% of the mining power of that network, thereby making crypto assets that rely on proof-of-work more susceptible to attack, as has occurred with Ethereum Classic.

We do not believe that we are required to support any fork or airdrop or provide the benefit of any forked or airdropped crypto asset to our customers. However, we have in the past and may in the future continue to be subject to claims by customers arguing that they are entitled to receive certain forked or airdropped crypto assets by virtue of crypto assets that they hold with us. If any customers succeed on a claim that they are entitled to receive the benefits of a forked or airdropped crypto asset that we do not or are unable to support, we may be required to pay significant damages, fines or other fees to compensate customers for their losses.

Future forks may occur at any time. A fork can lead to a disruption of networks and our information technology systems, cybersecurity attacks, replay attacks, or security weaknesses, any of which can further lead to temporary or even permanent loss of our and our customers’ assets. Such disruption and loss could cause us to be exposed to liability, even in circumstances where we have no intention of supporting an asset compromised by a fork.

We currently support, and expect to continue to support, various crypto assets that represent units of value on smart contracts deployed on a third-party blockchain. Smart contracts are programs that store and transfer value and execute automatically when certain conditions are met. Since smart contracts typically cannot be stopped or reversed, vulnerabilities in their programming and design can have damaging effects. For instance, in April 2018, a batch overflow bug was found in many Ethereum-based ERC20-compatible smart contract tokens that allowed hackers to create a large number of smart contract tokens, causing multiple crypto asset platforms worldwide to shut down ERC20-compatible token trading. Similarly, in March 2020, a design flaw in the MakerDAO smart contract caused forced liquidations of crypto assets at significantly discounted prices, resulting in millions of dollars of losses to users who had deposited crypto assets into the smart contract. If any such vulnerabilities or flaws come to fruition, smart contract-based crypto assets, including those held by our customers on our platforms, may suffer negative publicity, be exposed to security vulnerabilities, decline significantly in value, and lose liquidity over a short period of time.

In some cases, smart contracts can be controlled by one or more “admin keys” or users with special privileges, or “super users.” These users have the ability to unilaterally make changes to the smart contract, enable or disable features on the smart contract, change how the smart contract receives external inputs and data, and make other changes to the smart contract. For smart contracts that hold a pool of reserves, these users may also be able to extract funds from the pool, liquidate assets held in the pool, or take other actions that decrease the value of the assets held by the smart contract in reserves. Even for crypto assets that have adopted a decentralized governance mechanism, such as smart contracts that are governed by the holders of a governance token, such governance tokens can be concentrated in the hands of a small group of core community members, who would be able to make similar changes unilaterally to the smart contract. If any such super user or group of core members unilaterally make adverse changes to a smart contract, the design, functionality, features and value of the smart contract, its related crypto assets may be harmed. In addition, assets held by the smart contract in reserves may be stolen, misused, burnt, locked up or otherwise become unusable and irrecoverable. These super users can also become targets of hackers and malicious attackers. If an attacker is able to access or obtain the super user privileges of a smart contract, or if a smart contract’s super-userssuper users or core community members take actions that adversely affectsaffect the smart contract, our customers who hold and transact in the affected crypto assets may experience decreased functionality and value of the applicable crypto assets, up to and including a total loss of the value of such crypto assets. Although we do not control these smart contracts, any such events could cause customers to seek damages against us for their losses, result in reputational damage to us, or in other ways adversely impact our business.

We charge miner fees when a customer sends certain crypto assets from their Coinbase account to a non-Coinbase account. We estimate the miner fee based on the cost that we will incur to process the withdrawal transaction on the underlying blockchain network. In addition, we also pay miner fees when we move crypto assets for various operational purposes, such as when we transfer crypto assets between our hot and cold wallets, for which we do not charge our customers. However, miner fees canhave been and may continue to be unpredictable. For instance, in 2017, Bitcoin miner fees increased from approximately $0.35 per transaction in January 2017 to over $50 per transaction in December 2017. Even though Bitcoin’s miner fees have since decreased,continued to decrease, if the block rewards for miners on any blockchain network are not sufficiently high to incentivize miners, miners may demand higher transaction fees, or collude to reject low transaction fees and force users to pay higher fees. Although we generally attempt to pass miner fees relating to customer withdrawals through to our customers, we have in the past incurred, and expect to incur from time to time, losses associated with the payment of miner fees in excess of what we charge our customers, resulting in adverse impacts on our operating results.

Due to the new and evolving nature of crypto assets and the absence of comprehensive legal and tax guidance with respect to crypto asset products and transactions, many significant aspects of the U.S. and foreign tax treatment of transactions involving crypto assets, such as the purchase and sale of crypto assets on our platform, as well as the provision of staking rewards and other crypto asset incentives and rewards products, are uncertain, and it is unclear whether, when and what guidance may be issued in the future on the treatment of crypto asset transactions for U.S. and foreign income tax purposes.

In 2014, the IRS released Notice 2014-21, discussing certain aspects of “virtual currency” for U.S. federal income tax purposes and, in particular, stating that such virtual currency (i) is “property,” (ii) is not “currency” for purposes of the rules relating to foreign currency gain or loss, and (iii) may be held as a capital asset. In 2019, the IRS released Revenue Ruling 2019-24 and a set of “Frequently Asked Questions” (which have been periodically updated), that provide additional guidance, including guidance to the effect that, under certain circumstances, hard forks of digital currencies are taxable events giving rise to ordinary income and guidance with respect to the determination of the tax basis of virtual currency. However, this guidance does not address other significant aspects of the U.S. federal income tax treatment of crypto assets and related transactions.

There continues to be uncertainty with respect to the timing, character and amount of income inclusions for various crypto asset transactions including, but not limited to lending and borrowing crypto assets, staking rewards and other crypto asset incentives and rewards products that we offer. Although we believe our treatment of crypto asset transactions for federal income tax purposes is consistent with existing guidance provided by the IRS and existing U.S. federal income tax principles, because of the rapidly evolving nature of crypto asset innovations and the increasing variety and complexity of crypto asset transactions and products, it is possible the IRS and various U.S. states may disagree with our treatment of certain crypto asset offerings for U.S. tax purposes, which could adversely affect our customers and the vitality of our business. Similar uncertainties exist in the foreign markets in which we operate, affecting our non-U.S. customer base, and these uncertainties and potential adverse interpretations of tax law could affect our non-U.S. customers and the vitality of our platforms outside of the United States.

There can be no assurance that the IRS, the U.S. state revenue agencies or other foreign tax authorities, will not alter their respective positions with respect to crypto assets in the future or that a court would uphold the treatment set forth in existing guidance. It also is unclear what additional guidance may be issued in the future on the treatment of existing crypto asset transactions and future crypto asset innovations for purposes of U.S. tax or other foreign tax regulations. Any such alteration of existing IRS, U.S. state and foreign tax authority positions or additional guidance regarding crypto asset products and transactions could result in adverse tax consequences for holders of crypto assets and could have an adverse effect on the value of crypto assets and the broader crypto assets markets. Future technological and operational developments that may arise with respect to crypto assets may increase the uncertainty with respect to the treatment of crypto assets for U.S. and foreign tax purposes. The uncertainty regarding tax treatment of crypto asset transactions impacts our customers, and could impact our business, both domestically and abroad.

Although we believe we are compliant with U.S. tax reporting and withholding requirements with respect to our customers’ crypto asset transactions, the exact scope and application of such requirements, including but not limited to U.S. onboarding requirements through Form W, backup withholding, and Form 1099 reporting obligations, is not entirely clear for all of the crypto asset transactions that we facilitate. In November 2021, the U.S. Congress passed the Infrastructure Investment and Jobs Act or the IIJA,(the “IIJA”), providing that exchanges such as Coinbase would be responsible for reporting to the IRS the transactions of their customers in digital assets, including transfers to other exchanges or non-exchanges. In their current form, the IIJA’s new provisions for reporting transactions with respect to digital assets will become effective beginning with Form 1099s filed in 2024. In connection with the IIJA, it is expected that the IRS will introduce new rules related to our tax reporting and withholding obligations on our customer transactions in the future, likely in ways that differ from our existing compliance protocols and where there is risk that we do not have proper records to ensure compliance for certain legacy customers. If the IRS determines that we are not in compliance with our tax reporting or withholding requirements with respect to customer crypto asset transactions, we may be exposed to significant penalties, which could adversely affect our financial position. We anticipate guidance from the IRS regarding tax reporting and withholding obligations with respect to customer crypto asset transactions that will likely require us to invest substantially in new compliance measures and that may require significant retroactive compliance efforts, which also could adversely affect our financial position.

Similarly, it is likely that new rules for reporting crypto assets under the global “common reporting standard” as well as the “crypto-asset reporting framework” will be implemented on our international operations, creating new obligations and a need to invest in new onboarding and reporting infrastructure. Such rules are under discussion today by the member and observer states of the “Organization for Economic Cooperation and Development” and by the European Commission on behalf of the member states of the European Union. These new rules may give rise to potential liabilities or disclosure requirements for prior customer arrangements and new rules that affect how we onboard our customers and report their transactions to taxing authorities.

The accounting rules and regulations that we must comply with are complex and subject to interpretation by the Financial Accounting Standards Board or the FASB,(the “FASB”), the SEC, and various bodies formed to promulgate and interpret appropriate accounting principles. A change in these principles or interpretations could have a significant effect on our reported financial results, and may even affect the reporting of transactions completed before the announcement or effectiveness of a change. RecentFor example, on March 31, 2022, the staff of the SEC issued Staff Accounting Bulletin No. 121, or SAB 121, which represents a significant change regarding how a company safeguarding crypto assets held for its platform users reports such crypto assets on its balance sheet and requires retrospective application as of January 1, 2022. Moreover, recent actions and public comments from the FASB and the SEC have focused on the integrity of financial reporting and internal controls. In addition, many companies’ accounting policies are being subjected to heightened scrutiny by regulators and the public. Further, there has been limited precedentsprecedent for the financial accounting of crypto assets and related valuation and revenue recognition,recognition. Currently, we account for the crypto assets we hold for investment and no official guidance has been providedoperating purposes as intangible assets with indefinite useful lives, which requires us to measure these crypto assets at cost less impairment. As a result of the high volatility in the cryptoeconomy and of crypto asset prices, which may continue to experience significant declines, we may continue to record impairment charges on the crypto assets we hold in a particular period. For example, for the year ended December 31, 2022, we recorded gross impairment charges of $757.3 million due to the observed market price of crypto assets decreasing below the carrying value during the period. In May 2022, the FASB added a project to its technical agenda to improve the accounting for and disclosure of certain crypto assets. In October and December 2022, the FASB tentatively decided that crypto assets within the scope of the project should be measured at fair value with changes in fair value recorded in the income statement. On February 1, 2023, the FASB further clarified that the scope of the project excludes crypto assets issued and created by the reporting entity and its related parties and directed its staff to draft a proposed Accounting Standards Update (“ASU”) with a public comment period for 75 days. The FASB orhas not publicly communicated a timeline for the SEC.issuance of the proposed ASU. As such, there remains significant uncertainty on how companies can account for crypto assets transactions, crypto assets, and related revenue. Uncertainties in or changes to regulatory or financial accounting standards could result in the need to change our accounting methods and restate our financial statements and impair our ability to provide timely and accurate financial information, which could adversely affect our financial statements, result in a loss of investor confidence, and more generally impact our business, operating results, and financial condition.

As crypto assets have grown in both popularity and market size, various U.S. federal, state, and local and foreign governmental organizations, consumer agencies and public advocacy groups have been examining the operations of crypto networks, users and platforms, with a focus on how crypto assets can be used to launder the proceeds of illegal activities, fund criminal or terrorist enterprises, and the safety and soundness of platforms and other service providers that hold crypto assets for users. Many of these entities have called for heightened regulatory oversight, and have issued consumer advisories describing the risks posed by crypto assets to users and investors. For instance, in July 2019, U.S. Treasury Secretary Steven Mnuchin stated that he had “very serious concerns” about crypto assets,September 2022, the White House published a fact sheet described as the first-ever “Comprehensive Framework for Responsible Development of Digital Assets,” which encouraged “agencies to issue guidance and indicated that FinCEN is planning to release new requirements relating to crypto asset activities in 2020. Outside the United States, several jurisdictions have banned so-called initial coin offerings, such as China and South Korea, while Canada, Singapore, and Hong Kong, have opined that token offerings may constitute securities offerings subject to local securities regulations. In July 2019, the United Kingdom’s Financial Conduct Authority proposed rules to address harm to retail customers arising fromcurrent and emergent risks in the saledigital asset ecosystem.”

The cryptoeconomy is novelnovel. As a result, many policymakers are just beginning to consider what a regulatory regime for crypto would look like and has limited access to policymakers and lobbying organizations in many jurisdictions.the elements that would serve as the foundation for such a regime. Competitors, from other, more established industries, including traditional financial services, have spent years cultivating professional relationships with relevant policymakers on behalf of their industry so that those policymakers may understand that industry, the current legal landscape affecting that industry, and the specific policy proposals that could be implemented in order to responsibly develop that industry. The lobbyists working for these competitors have greater accesssimilarly spent years developing and working to implement strategies to advance these industries. Members of the cryptoeconomy have started to engage policymakers directly and with the help of external advisors and lobbyists, or governmental officials,but this work is in a relatively nascent stage and regulators that are concerned aboutprogress in this area could suffer setbacks following the potential for crypto assets for illicit usage may affect statutory and regulatory changes with minimal or discounted inputs from the cryptoeconomy.2022 Events. As a result, new laws and regulations may be proposed and adopted in the United States and internationally, or existing laws and regulations may be interpreted in new ways, that harm the cryptoeconomy or crypto asset platforms, which could adversely impact our business.

We are required to possess sufficient financial soundness and strength to adequately support our regulated subsidiaries. We may from time to time incur indebtedness and other obligations which could make it more difficult to meet these capitalization requirements or any additional regulatory requirements. In addition, although we are not a bank holding company for purposes of United States law or the law of any other jurisdiction, as a global provider of financial services and in light of the changing regulatory environment in various jurisdictions, we could become subject to new capital requirements introduced or imposed by the United States and international regulators. Any change or increase in these regulatory requirements could have an adverse effect on our business, operating results, and financial condition.

The CFTC has stated and judicial decisions involving CFTC enforcement actions have confirmed that at least some crypto assets, including Bitcoin, fall within the definition of a “commodity” under the CEA. As a result, the CFTC has general enforcement authority to police against manipulation and fraud in at least some spot crypto asset markets. From time to time, manipulation, fraud, and other forms of improper trading by market participants have resulted in, and may in the future result in, CFTC investigations, inquiries, enforcement action, and similar actions by other regulators, government agencies, and civil litigation. Such investigations, inquiries, enforcement actions, and litigation may cause us to incur substantial costs and could result in negative publicity.

Any transaction in a commodity, including a crypto asset, entered into with or offered to retail investors using leverage, margin, or other financing arrangements (a “retail leveraged commodity transaction”) is subject to CFTC regulation as a futures contract unless such transaction results in actual delivery within 28 days. The meaning of “actual delivery” has been the subject of commentary and litigation, and in 2020, the CFTC has adopted interpretive guidance addressing the “actual delivery” of a crypto asset. To the extent that crypto asset transactions that we facilitate or facilitated are deemed retail leveraged commodity transactions, including pursuant to current or subsequent rulemaking or guidance by the CFTC, we may be subject to additional regulatory requirements and oversight, and we could be subject to judicial or administrative sanctions if we do not or did not at a relevant time possess appropriate registrations. The CFTC has previously brought enforcement actions against entities engaged in retail leveraged commodity transactions without appropriate registrations.

Commodity interests, as such term is defined by the CEA and CFTC rules and regulations, are subject to more extensive supervisory oversight by the CFTC, including registrations of entities engaged in, and platforms offering, commodity interest transactions. This CFTC authority extends to crypto asset futures contracts and swaps, including transactions that are based on current and future prices of crypto assets and indices of crypto assets. To the extent that a crypto asset in which we facilitate or facilitated trading or transactions in a crypto asset which we facilitate or facilitated are deemed to fall within the definition of a commodity interest, including pursuant to subsequent rulemaking or guidance by the CFTC, we may be subject to additional regulatory requirements and oversight and could be subject to judicial or administrative sanctions if we do not or did not at a relevant time possess appropriate registrations as an exchange (for example, as a designated contract market for trading futures or options on futures, or as a swaps execution facility for trading swaps) or as a registered intermediary (for example, as a futures commission merchant or introducing broker). Such actions could result in injunctions, cease and desist orders, as well as civil monetary penalties, fines, and disgorgement, as well as reputational harm. The CFTC has previously brought enforcement actions against entities engaged in crypto asset activities for failure to obtain appropriate exchange, execution facility and intermediary registrations.

Furthermore, the CFTC and the SEC have jointly adopted regulations defining “security-based swaps,” which include swaps based on single securities and narrow-based indices of securities. If a crypto asset is deemed to be a security, certain transactions referencing that crypto asset could constitute a security-based swap. A crypto asset or transaction therein that is based on or references a security or index of securities, whether or not such securities are themselves crypto assets, could also constitute a security-based swap. To the extent that a crypto asset in which we facilitate or have facilitated trading or transactions in a crypto asset which we facilitate or have facilitated are deemed to fall within the definition of a security-based swap, including pursuant to subsequent rulemaking or guidance by the CFTC or SEC, we may be subject to additional regulatory requirements and oversight by the SEC and could be subject to judicial or administrative sanctions if we do not or did not a relevant time possess appropriate registrations as an exchange (for example, as a security-based swaps execution facility) or as a registered intermediary (for example, as a security-based swap dealer or broker-dealer). This could result in injunctions, cease and desist orders, as well as civil monetary penalties, fines, and disgorgement, as well as reputational harm.

We obtain and process large amounts of sensitive data, including personal data related to our customers and their transactions, such as their names, addresses, social security numbers, visa information, copies of government-issued identification, facial recognition data (from scanning of photographs for identity verification), trading data, tax identification, and bank account information. We face risks, including to our reputation, in the handling and protection of this data, and these risks will increase as our business continues to expand, including through our acquisition of, and investment in, other companies and technologies. Federal, state, and international laws and regulations governing privacy, data protection, and e-commerce transactions require us to safeguard our customers’, employees’, and service providers’ personal data.

Our future success depends on the reliability and security of our platform. To the extent that the measures we, any companies we acquire, or our third-party business partners have taken prove to be insufficient or inadequate, or to the extent we discover a security breach suffered by a company we acquire following the closing of such acquisition, we may become subject to litigation, breach notification obligations, or regulatory or administrative sanctions, which could result in significant fines, penalties, damages, harm to our reputation, or loss of customers. If our own confidential business information or sensitive customer information were improperly disclosed, our business could be adversely affected. Additionally, a party who circumvents our security measures could, among other effects, appropriate customer information or other proprietary data, cause interruptions in our operations, or expose customers to hacks, viruses, and other disruptions.

Depending on the nature of the information compromised, in the event of a data breach or other unauthorized access to our customer data, we may also have obligations to notify customers and regulators about the incident, and we may need to provide some form of remedy, such as a subscription to credit monitoring services, pay significant fines to one or more regulators, or pay compensation in connection with a class-action settlement (including under the private right of action under the California Consumer Privacy Act of 2018 or the CCPA,(the “CCPA”), which is expected to increase security breach litigation). Such breach notification laws continue to evolve and may be inconsistent from one jurisdiction to another. Complying with these obligations could cause us to incur substantial costs and could increase negative publicity surrounding any incident that compromises customer data. Additionally, the financial exposure from the events referenced above could either not be insured against or not be fully covered through any insurance that we may maintain, and there can be no assurance that the limitations of liability in any of our contracts would be enforceable or adequate or would otherwise protect us from liabilities or damages as a result of the events referenced above. Any of the foregoing could have an adverse effect on our business, reputation, operating results, and financial condition.

Furthermore, we may be required to disclose personal data pursuant to demands from individuals, regulators, government agencies, and law enforcement agencies in various jurisdictions with conflicting privacy and security laws, which could result in a breach of privacy and data protection policies, notices, laws, rules, court orders, and regulations. Additionally, changes in the laws and regulations that govern our collection, use, and disclosure of customer data could impose additional requirements with respect to the retention and security of customer data, could limit our marketing activities, and have an adverse effect on our business, operating results, and financial condition.

Various local, state, federal, and international laws, directives, and regulations apply to our collection, use, retention, protection, disclosure, transfer, and processing of personal data. These data protection and privacy laws and regulations are subject to uncertainty and continue to evolve in ways that could adversely impact our business. These laws have a substantial impact on our operations both outside and in the United States, either directly or as a data processor and handler for various offshore entities.

In the United States, state and federal lawmakers and regulatory authorities have increased their attention on the collection and use of user data. In the United States, non-sensitive user data generally may be used under current rules and regulations, subject to certain restrictions, so long as the person does not affirmatively “opt-out” of the collection or use of such data. If an “opt-in” model or additional required “opt-outs” were to be adopted in the United States, less data may be available, and the cost of data likely would increase. For example, California enacted the CCPA which became operative on(effective January 1, 20202020) and became enforceable by the California Attorney General on July 1, 2020. Since then, the CCPA has been amended on multiple occasions most recently on March 15, 2021. Additionally, although not effective until January 1, 2023 (with a look back to January 2022 for certain date collection practices), in the November 2020 election, California voters passed the California Privacy Rights Act or the CPRA,(the “CPRA”) (effective January 2023), which expands upon and amends the CCPA.

The CCPA requires, and the CPRA will require covered companies to, among other things, provide new disclosures to California users, and affords such users new privacy rights such as the ability to opt-out of certain sales of personal information and expanded rights to access and require deletion of their personal information, opt out of certain personal information sharing, and receive detailed information about how their personal information is collected, used, and shared. The CCPA provides for civil penalties for violations, as well as a private right of action for security breaches that may increase security breach litigation. Potential uncertainty surrounding the CCPA and CPRA may increase our compliance costs and potential liability, particularly in the event of a data breach, and could have a material adverse effect on our business, including how we use personal information, our financial condition, the results of our operations or prospects.

Other states have followed California’s lead. For example, in 2021, Virginia passed the Consumer Data Protection Act or the CDPA,(the “CDPA”) (effective January 1, 2023) and Colorado passed the Colorado Privacy Act or the CPA,(the “CPA”) (effective July 1, 2023), both of which will to provide comparable consumer privacy rights to the CCPA/CPRA. We cannot fully predict the impact of the CCPA, CPRA, CDPA, CPA, or other similar laws or regulations on our business or operations, but compliance may require us to modify our data processing practices and policies incurring costs and expense. Further, to the extent multiple state-level laws are introduced with inconsistent or conflicting standards, and given presently that there are no federal laws to preempt such state laws, it may require costly and difficult efforts to achieve compliance with such laws that could expose us to fines and penalties for non-compliance, particularly regarding legal obligations in the wake of a data breach. Further, in October 2021,2022, the CFPB launchedre-opened the public comment period in connection with an inquiry that it launched in October 2021 into the data use and protection business practices of several large payments companies. The impact of this inquiry is uncertain and could result in stringent restrictions on the use of customer data.

In Europe, the General Data Protection Regulation or the GDPR,(the “GDPR”) took effect on May 25, 2018. As a result of our presence in Europe and our service offering in the European Union, we are subject to the GDPR, which imposes stringent E.U. data protection requirements, and could increase the risk of non-compliance and the costs of providing our products and services in a compliant manner. A breach of the GDPR could result in regulatory investigations, reputational damage, fines and sanctions, orders to cease or change our processing of our data, enforcement notices, or assessment notices (for a compulsory audit). We may also face civil claims including representative actions and other class action type litigation (where individuals have suffered harm), potentially amounting to significant compensation or damages liabilities, as well as associated costs, diversion of internal resources, and reputational harm.

Administrative fines under the GDPR can amount up to 20 million Euros or four percent of the group’s annual global turnover, whichever is highest. Additionally, the United Kingdom or the U.K.,(the “U.K.”) implemented its own Data Protection Act, effective in May 2018 and statutorily amended in 2019, which is further supplemented by the U.K. GDPR, which came into effect on January 1, 2021. The U.K. GDPR is based on the E.U. GDPR which applied in the U.K. before that date, with some changes to make it work more effectively in a U.K. context, including its own derogations, for how GDPR is applied in the U.K. From the beginning of 2021 (when the transitional period following Brexit expired), we have to continue to comply with the E.U. GDPR as well as the U.K.’s Data Protection Act and U.K. GDPR, with each regime having the ability to result in fines up to the greater of €20 million (£1717.5 million) or 4% of global turnover.

Both the E.U. GDPR (covering the EEA) as well as U.K. and Swiss data protection laws impose strict rules on the transfer of personal data out of the E.U., U.K., or Switzerland to a “third country,” including the United States. These obligations may be interpreted and applied in a manner that is inconsistent from one jurisdiction to another and may conflict with other requirements or our practices. On July 16, 2020, the Court of Justice of the European Union or the CJEU,(the “CJEU”) invalidated the E.U.-U.S., Privacy Shield (under which personal data could be transferred from the E.U. to U.S. entities that had self-certified under the Privacy Shield scheme), or the Privacy Shield, on the grounds that the Privacy Shield failed to offer adequate protections to E.U. personal data transferred to the United States. In addition, while the CJEU upheld the adequacy of the standard contractual clauses (a standard form of contract approved by the European Commission as an adequate personal data transfer mechanism, and potential alternative to the Privacy Shield), it made clear that reliance on them alone may not necessarily be sufficient in all circumstances. Use of the standard contractual clauses must now be assessed on a case by case basis taking into account the legal regime applicable in the destination country, in particular applicable surveillance laws and rights of individuals. The use of standard contractual clauses for the transfer of personal data specifically to the United States remains under review by a number of European data protection supervisory authorities, along with those of some other E.U. member states. German and Irish supervisory authorities have indicated, and enforced in recent rulings, that the standard contractual clauses alone provide inadequate protection for E.U.-U.S. data transfers. Further, on June 4, 2021 the European Commission finalized new versions of the Standard Contractual Clauses, with the Implementing Decision now in effect as of June 27, 2021. Under the Implementing Decision, we have until December 27, 2022 to update any existing agreements, or any new agreements executed before September 27, 2021, that rely on Standard Contractual Clauses as the data transfer mechanism. To comply with the Implementing Decision and the new Standard Contractual Clauses, we may need to implement additional safeguards to further enhance the security of data transferred outeffect. The U.K. Information Commissioner’s Office of the EEA, conduct data transfer impact assessments, and review existing agreements which could increase our compliance costs, expose us to further regulatory scrutiny and liability, and adversely affect our business. The U.K. data protection regulator is consulting onData Protection Authority published the U.K. version of the Standard Contractual Clauses or the SCCs,(the “SCCS”), and intendsby March 2024, we will be required to publish them in 2022, but in the interim has indicateduse and honor these clauses for transfers of U.K. residents’ personal data to a foreign country that using the E.U. SCCs with appropriate modifications is sufficient fordoes not have adequate data transfers from the United Kingdom.protection.

While we maintain a Privacy Shield certification, we rely on the standard contractual clauses for intercompany data transfers from the European Union to the United States and have reviewed and amended any existing vendor agreements that rely only on Privacy Shield as the data transfer mechanism. As supervisory authorities continue to issue further guidance on personal data, we could suffer additional costs, complaints, or regulatory investigations or fines, and if we are otherwise unable to transfer personal data between and among countries and regions in which we operate, it could affect the manner in which we provide our services, the geographical location or segregation of our relevant systems and operations and could adversely affect our financial results.

We are also subject to evolving E.U. privacy laws on cookies and e-marketing. In the European Union, regulators are increasingly focusing on compliance with requirements in the online behavioral advertising ecosystem, and an E.U. regulation known as the ePrivacy Regulation will significantly increase fines for non-compliance once in effect. In the European Union, informed consent, including a prohibition on pre-checked consents and a requirement to ensure separate consents for each cookie, is required for the placement of a cookie or similar technologies on a user’s device and for direct electronic marketing. As regulators start to enforce the strict approach in recent guidance, this could lead to substantial costs, require significant systems changes, limit the effectiveness of our marketing activities, divert the attention of our technology personnel, negatively impact our efforts to understand users, adversely affect our margins, increase costs, and subject us to additional liabilities.

There is a risk that as we expand, we may assume liabilities for breaches experienced by the companies we acquire. Additionally, there are potentially inconsistent world-wide government regulations pertaining to data protection and privacy. Despite our efforts to comply with applicable laws, regulations and other obligations relating to privacy, data protection, and information security, it is possible that our practices, offerings, or platform could fail, or be alleged to fail to meet applicable requirements. For instance, the overall regulatory framework governing the application of privacy laws to blockchain technology is still highly undeveloped and likely to evolve. Our failure, or the failure by our third-party providers or partners, to comply with applicable laws or regulations and to prevent unauthorized access to, or use or release of personal data, or the perception that any of the foregoing types of failure has occurred, even if unfounded, could subject us to audits, inquiries, whistleblower complaints, adverse media coverage, investigations, severe criminal, or civil sanctions, damage our reputation, or result in fines or proceedings by governmental agencies and private claims and litigation, any of which could adversely affect our business, operating results, and financial condition.

We rely on banks and other payment processors to process customers’ payments in connection with the purchase of crypto assets on our platform and we pay these providers fees for their services. From time to time, payment networks have increased, and may increase in the future, the interchange fees and assessments that they charge for transactions that use their networks. Payment networks have imposed, and may impose in the future, special fees on the purchase of crypto assets, including on our platform, which could negatively impact us and significantly increase our costs. Our payment card processors may have the right to pass any increases in interchange fees and assessments on to us, and may impose additional use charges which would increase our operating costs and reduce our operating income. We could attempt to pass these increases along to our customers, but this strategy might result in the loss of customers to our competitors that may not pass along the increases, thereby reducing our revenue and earnings. If competitive practices prevent us from passing along the higher fees to our customers in the future, we may have to absorb all or a portion of such increases, thereby increasing our operating costs and reducing our earnings.

We may also be directly or indirectly liable to the payment networks for rule violations. Payment networks set and interpret their network operating rules and have alleged from time to time that various aspects of our business model violate these operating rules. If such allegations are not resolved favorably, they may result in significant fines and penalties or require changes in our business practices that may be costly and adversely affect our business. The payment networks could adopt new operating rules or interpret or reinterpret existing rules that we or our processors might find difficult or even impossible to follow, or costly to implement. As a result, we could lose our ability to give customers the option of using cards to fund their purchases or the choice of currency in which they would like their card to be charged. If we are unable to accept cards or are limited in our ability to do so, our business would be adversely affected.

We rely upon third-party platforms for the distribution of certain products and services. Our Coinbase Coinbase Pro, and Coinbase Wallet apps are provided as free applications through both the Apple App Store and the Google Play Store, and are also accessible via mobile and traditional websites. The Google Play Store and Apple App Store are global application distribution platforms and the main distribution channels for our apps. As such, the promotion, distribution, and operation of our apps are subject to the respective platforms’ terms and policies for application developers, which are very broad and subject to frequent changes and re-interpretation. Further, these distribution platforms often contain restrictions related to crypto assets that are uncertain, broadly construed, and can limit the nature and scope of services that can be offered. For example, Apple App Store’s restrictions related to crypto assets have disrupted the proposed launch of many features within the Coinbase and Coinbase Wallet apps, including our EarnLearning Rewards (formerly “Earn”) and NFT transfer services and access to decentralized applications. If our products are found to be in violation of any such terms and conditions, we may no longer be able to offer our products through such third-party platforms. There can be no guarantee that third-party platforms will continue to support our product offerings, or that customers will be able to continue to use our products. For example, in November 2013, our iOS app was temporarily removed by Apple from the Apple App Store. In December 2019, we were similarly instructed by Apple to remove certain features relating to decentralized applications from our application to comply with the Apple App Store’s policies. Any changes, bugs, technical or regulatory issues with third-party platforms, our relationships with mobile manufacturers and carriers, or changes to their terms of service or policies could degrade our products’ functionalities, reduce or eliminate our ability to distribute our products, give preferential treatment to competitive products, limit our ability to deliver high quality offerings, or impose fees or other charges, any of which could affect our product usage and harm our business.

Our business depends in large part on our proprietary technology and our brand. We rely on, and expect to continue to rely on, a combination of trademark, trade dress, domain name, copyright, and trade secrets, as well as confidentiality and license agreements with our employees, contractors, consultants, and third parties with whom we have relationships, to establish and protect our brand and other intellectual property rights. However, our efforts to protect our intellectual property rights may not be sufficient or effective. Our proprietary technology and trade secrets could be lost through misappropriation or breach of our confidentiality and license agreements, and any of our intellectual property rights may be challenged, which could result in them being narrowed in scope or declared invalid or unenforceable. There can be no assurance that our intellectual property rights will be sufficient to protect against others offering products, services, or technologies that are substantially similar to ours and that compete with our business.

We do not intend to monetize our patents or attempt to block third parties from competing with us by asserting our patents offensively, but our ability to successfully defend intellectual property challenges from competitors and other parties may depend, in part, on our ability to counter-assert our patents defensively. Effective protection of our intellectual property may be expensive and difficult to maintain, both in terms of application and registration costs as well as the costs of defending and enforcing those rights. As we have grown, we have sought to obtain and protect our intellectual property rights in an increasing number of countries, a process that can be expensive and may not always be successful. In some instances, patent applications or patents may be abandoned or allowed to lapse, resulting in partial or complete loss of patent rights in a relevant jurisdiction. Further, intellectual property protection may not be available to us in every country in which our products and services are available. For example, some foreign countries have compulsory licensing laws under which a patent owner must grant licenses to third parties. In addition, many countries limit the enforceability of patents against certain third parties, including government agencies or government contractors. In these countries, patents may provide limited or no benefit. We may also agree to license our patents to third parties as part of various patent pools and open patent projects. Those licenses may diminish our ability, though, to counter-assert our patents against certain parties that may bring claims against us.

In recent years, there has been considerable patent, copyright, trademark, domain name, trade secret and other intellectual property development activity in the cryptoeconomy, as well as litigation, based on allegations of infringement or other violations of intellectual property, including by large financial institutions. Furthermore, individuals and groups can purchase patents and other intellectual property assets for the purpose of making claims of infringement to extract settlements from companies like ours. Our use of third-party intellectual property rights also may be subject to claims of infringement or misappropriation. We cannot guarantee that our internally developed or acquired technologies and content do not or will not infringe the intellectual property rights of others. From time to time, our competitors or other third parties may claim that we are infringing upon or misappropriating their intellectual property rights, and we may be found to be infringing upon such rights. Any claims or litigation could cause us to incur significant expenses and, if successfully asserted against us, could require that we pay substantial damages or ongoing royalty payments, prevent us from offering our products or services or using certain technologies, force us to implement expensive work-arounds, or impose other unfavorable terms. We expect that the occurrence of infringement claims is likely to grow as the crypto assets market grows and matures. Accordingly, our exposure to damages resulting from infringement claims could increase and this could further exhaust our financial and management resources. Further, during the course of any litigation, we may make announcements regarding the results of hearings and motions, and other interim developments. If securities analysts and investors regard these announcements as negative, the market price of our Class A common stock may decline. Even if intellectual property claims do not result in litigation or are resolved in our favor, these claims, and the time and resources necessary to resolve them, could divert the resources of our management and require significant expenditures. Any of the foregoing could prevent us from competing effectively and could have an adverse effect on our business, operating results, and financial condition.

Our platform contains software modules licensed to us by third-party authors under “open source” licenses. We also make certain of our own software available to users for free under various open source licenses. Use and distribution of open source software may entail greater risks than use of third-party commercial software, as open source licensors generally do not provide support, warranties, indemnification or other contractual protections regarding infringement claims or the quality of the code. In addition, the public availability of such software may make it easier for others to compromise our platform.

Some open source licenses contain requirements that we make available source code for modifications or derivative works we create based upon the type of open source software we use, or grant other licenses to our intellectual property. If we combine our proprietary software with open source software in a certain manner, we could, under certain open source licenses, be required to release the source code of our proprietary software to the public. This would allow our competitors to create similar offerings with lower development effort and time and ultimately could result in a loss of our competitive advantages. Alternatively, to avoid the public release of the affected portions of our source code, we could be required to expend substantial time and resources to re-engineer some or all of our software.

We have not recently conducted an extensive audit of our use of open source software and, as a result, we cannot assure you that our processes for controlling our use of open source software in our platform are, or will be, effective. If we are held to have breached or failed to fully comply with all the terms and conditions of an open source software license, we could face litigation, infringement or other liability, or be required to seek costly licenses from third parties to continue providing our offerings on terms that are not economically feasible, to re-engineer our platform, to discontinue or delay the provision of our offerings if re-engineering could not be accomplished on a timely basis or to make generally available, in source code form, our proprietary code, any of which could adversely affect our business, operating results, and financial condition. Moreover, the terms of many open source licenses have not been interpreted by United StatesU.S. or foreign courts. As a result, there is a risk that these licenses could be construed in a way that could impose unanticipated conditions or restrictions on our ability to provide or distribute our platform. From time to time, there have been claims challenging the ownership of open source software against companies that incorporate open source software into their solutions. As a result, we could be subject to lawsuits by parties claiming ownership of what we believe to be open source software.

We operate in a relatively new industry that is not widely understood and requires highly skilled and technical personnel. We believe that our future success is highly dependent on the talents and contributions of our senior management team, including Mr. Armstrong, our co-founder and Chief Executive Officer, members of our executive team, and other key employees across product, engineering, risk management, finance, compliance and legal, and marketing. Our future success depends on our ability to attract, develop, motivate, and retain highly qualified and skilled employees. Due to the nascent nature of the cryptoeconomy, the pool of qualified talent is extremely limited, particularly with respect to executive talent, engineering, risk management, and financial regulatory expertise. We face intense competition for qualified individuals from numerous software and other technology companies. To attract and retain key personnel, we incur significant costs, including salaries and benefits and equity incentives. Even so, these measures may not be enough to attract and retain the personnel we require to operate our business effectively. The loss of even a few qualifiedkey employees or senior leaders, or an inability to attract, retain and motivate additional highly skilled employees required for the planned expansion of our business could adversely impact our operating results and impair our ability to grow.

We believe that our entrepreneurial and innovative corporate culture has been a key contributor to our success. We encourage and empower our employees to develop and launch new and innovative products and services, which we believe is essential to attracting high quality talent, partners, and developers, as well as serving the best, long-term interests of our company. If we cannot maintain this culture, as we grow, we could lose the innovation, creativity and teamwork that has been integral to our business. Additionally, from time to time, we realign our resources and talent to implement stage-appropriate business strategies, including furloughs, layoffs, or reductions in force. In such cases, we may find it difficult to prevent a negative effect on employee morale or attrition beyond our planned reduction, in which case our products and services may suffer and our business, operating results, and financial condition could be adversely impacted.

Employee or service provider misconduct or error could subject us to legal liability, financial losses, and regulatory sanctions and could seriously harm our reputation and negatively affect our business. Such misconduct could include engaging in improper or unauthorized transactions or activities, misappropriation of customer funds, insider trading and misappropriation of information, failing to supervise other employees or service providers, improperly using confidential information, as well as improper trading activity such as spoofing, layering, wash trading, manipulation and front-running. Employee or service provider errors, including mistakes in executing, recording, or processing transactions for customers, could expose us to the risk of material losses even if the errors are detected. Although we have implemented processes and procedures and provide trainings to our employees and service providers to reduce the likelihood of misconduct and error, these efforts may not be successful. Moreover, the risk of employee or service provider error or misconduct may be even greater for novel products and services and is compounded by the fact that many of our employees and service providers are accustomed to working at tech companies which generally do not maintain the same compliance customs and rules as financial services firms. This can lead to high risk of confusion among employees and service providers particularly in a fast growth company like ours, with respect to compliance obligations, particularly including confidentiality, data access, trading, and conflicts. It is not always possible to deter misconduct, and the precautions we take to prevent and detect this activity may not be effective in all cases. If we were found to have not met our regulatory oversight and compliance and other obligations, we could be subject to regulatory sanctions, financial penalties, restrictions on our activities for failure to properly identify, monitor and respond to potentially problematic activity and seriously damage our reputation. Our employees, contractors, and agents could also commit errors that subject us to financial claims for negligence, as well as regulatory actions, or result in financial liability. Further, allegations by regulatory or criminal authorities of improper trading activities could affect our brand and reputation.

We frequently engage in a wide variety of transactions and maintain relationships with a significant number of crypto projects, their developers, members of their ecosystem, and investors. These transactions and relationships could create potential conflicts of interests in management decisions that we make. For instance, certain of our officers, directors, and employees are active investors in crypto projects themselves, and may make investment decisions that favor projects that they have personally invested in. Many of our large stockholders also make investments in these crypto projects. In addition, our co-founder and Chief Executive Officer, Mr. Armstrong, is involved in a number of initiatives related to the cryptoeconomy and more broadly. For example, Mr. Armstrong currently serves as the chief executive officer of ResearchHub Technologies, Inc., a scientific research development platform. This and other initiatives he is involved in could divert Mr. Armstrong's time and attention from overseeing our business operations which could have a negative impact on our business. Moreover, we may in the future be subject to litigation as a result of his involvement with these other initiatives.

Our performance is subject to general economic conditions, and their impact on the crypto asset markets and our customers. The United States and other key international economies have experienced cyclical downturns from time to time in which economic activity declined resulting in lower consumption rates, restricted credit, reduced profitability, weaknesses in financial markets, bankruptcies, and overall uncertainty with respect to the economy. The impact ofAdverse general economic conditions onhave impacted the cryptoeconomy, is highlyalthough the extent of which remains uncertain and dependent on a variety of factors, including market adoption of crypto assets, global trends in the cryptoeconomy, central bank monetary policies, and other events beyond our control. Geopolitical developments, such as trade wars and foreign exchange limitations can also increase the severity and levels of unpredictability globally and increase the volatility of global financial and crypto asset markets. For example, the capital and credit markets have experienced extreme volatility and disruptions, resulting in steep declines in the value of crypto assets. To the extent general economic conditions and crypto assets markets materially deteriorate or the current decline continues for a prolonged period, our ability to generate revenue and to attract and retain customers could suffer and our business, operating results and financial condition could be adversely affected. Moreover, even if general economic conditions improve, there is no guarantee that the cryptoeconomy will similarly improve.

Further, in 2022, a number of blockchain protocols and crypto financial firms, and in particular protocols and firms involving high levels of financial leverage such as high-yield lending products or derivatives trading, suffered from insolvency and liquidity crises leading to the 2022 Events. Some of the 2022 Events are alleged to be the result of fraudulent activity by insiders, including misappropriation of customer funds and other illicit activity and internal controls failures. To the extent there is additional economic impact of these events, which remains unknown and difficult to predict, concerns have been raised about the potential for a market condition where the failure of one company leads to the financial distress of other companies. Forced selling by distressed companies may also depress the prices of assets used as collateral by other firms. If this market condition becomes widespread in the cryptoeconomy, including as a result of the 2022 Events, we may suffer from increased counterparty risk, including defaults or bankruptcies of major customers or counterparties, which could lead to significantly reduced activity on our platform and fewer available crypto market opportunities in general. Further, forced selling of crypto assets by distressed companies could lead to lower crypto asset prices and a consequent reduction in our revenue. To the extent that conditions in the general economic and crypto assets markets materially deteriorate, our ability to attract and retain customers may suffer.

Our employees and service providers work from home and we are a remote-first company. This subjects us to heightened operational risks. For example, technologies in our employees’ and service providers’ homes may not be as robust as in our offices and could cause the networks, information systems, applications, and other tools available to employees and service providers to be more limited or less reliable than in our offices. Further, the security systems in place at our employees’ and service providers’ homes may be less secure than those used in our offices, and while we have implemented technical and administrative safeguards to help protect our systems as our employees and service providers work from home, we may be subject to increased cybersecurity risk, which could expose us to risks of data or financial loss, and could disrupt our business operations. There is no guarantee that the data security and privacy safeguards we have put in place will be completely effective or that we will not encounter risks associated with employees and service providers accessing company data and systems remotely. We also face challenges due to the need to operate with the remote workforce and are addressing those challenges to minimize the impact on our ability to operate.

Being a remote-first company may make it more difficult for us to preserve our corporate culture and our employees may have decreased opportunities to collaborate in meaningful ways. Further, we cannot guarantee that being a remote-first company will not have a negative impact on employee morale and productivity. Any failure to preserve our corporate culture and foster collaboration could harm our future success, including our ability to retain and recruit personnel, innovate and operate effectively, and execute on our business strategy.

In addition,The ongoing COVID-19 pandemic, including the continuedresurgence of cases related to the spread of COVID-19new variants, and the imposition of related public health measures have resulted in and is expected to continue to result in, increased volatility and uncertainty in the cryptoeconomy. We alsoMoreover, we rely on third party service providers to perform certain functions. Anyfunctions and any disruptions to a service providers’ business operations resulting from business restrictions, quarantines, or restrictions on the ability of personnel to perform their jobs could have an adverse impact on our service providers’ ability to provide services to us. The continued spread ofongoing COVID-19 pandemic and efforts to contain the virusrelated public health measures could adversely impact our strategic business plans and growth strategy, reduce demand for our products and services, reduce the availability and productivity of our employees, service providers, and third-party resources, cause us to experience an increase in costs due to emergency measures, and otherwise adversely impact our business.

There is an increasing focus from certain investors, employees, users and other stakeholders concerning corporate responsibility, specifically related to environmental, social and governance matters, or ESG. Some investors may use these non-financial performance factors to guide their investment strategies and, in some cases, may choose not to invest in us if they believe our policies and actions relating to corporate responsibility are inadequate. The growing investor demand for measurement of non-financial performance is addressed by third-party providers of sustainability assessment and ratings on companies. The criteria by which our corporate responsibility practices are assessed may change due to the constant evolution of the sustainability landscape, which could result in greater expectations of us and cause us to undertake costly initiatives to satisfy such new criteria. If we elect not to or are unable to satisfy such new criteria, investors may conclude that our policies and actions with respect to corporate social responsibility are inadequate. We may face reputational damage in the event that we do not meet the ESG standards set by various constituencies.

Furthermore, if our competitors’ corporate social responsibility performance is perceived to be better than ours, potential or current investors may elect to invest with our competitors instead. In addition, in the event that we communicate certain initiatives and goals regarding environmental, social and governance matters, we could fail, or be perceived to fail, in our achievement of such initiatives or goals, or we could be criticized for the scope of such initiatives or goals. If we fail to satisfy the expectations of investors, employees and other stakeholders or our initiatives are not executed as planned, our reputation and business, operating results and financial condition could be adversely impacted. For example, in order to advance our mission, in February 2022 we recently launched our Coinbase Innovation Political Action Committee to support crypto-forward political candidates and initiatives. However, our political activities to further our mission may not be successful or may be perceived unfavorably by investors and the public and have an adverse impact on our brand and reputation.

Our management team has limited experience managing a publicly traded company, interacting with public company investors, and complying with the increasingly complex laws pertaining to public companies. Our management team may not successfully or efficiently manage our transition to being a public company subject to significant regulatory oversight and reporting obligations under the federal securities laws and the continuous scrutiny of securities analysts and investors. These new obligations and constituents will require significant attention from our senior management and could divert their attention away from the day-to-day management of our business, which could adversely affect our business, operating results, and financial condition.

We are subject to complex tax laws and regulations in the United States and a variety of foreign jurisdictions. All of these jurisdictions have in the past and may in the future make changes to their corporate income tax rates and other income tax laws which could increase our future income tax provision. For example, our future income tax obligations could be adversely affected by earnings that are lower than anticipated in jurisdictions where we have lower statutory rates and by earnings that are higher than anticipated in jurisdictions where we have higher statutory rates, by changes in the valuation of our deferred tax assets and liabilities, by changes in the amount of unrecognized tax benefits, or by changes in tax laws, regulations, accounting principles, or interpretations thereof, including changes with possible retroactive application or effect.

Our determination of our tax liability is subject to review and may be challenged by applicable U.S. and foreign tax authorities. Any adverse outcome of such a challenge could harm our operating results and financial condition. The determination of our worldwide provision for income taxes and other tax liabilities requires significant judgment and, in the ordinary course of business, there are many transactions and calculations where the ultimate tax determination is complex and uncertain. Moreover, as a multinational business, we have subsidiaries that engage in many intercompany transactions in a variety of tax jurisdictions where the ultimate tax determination is complex and uncertain. Our existing corporate structure and intercompany arrangements have been implemented in a manner we believe is in compliance with current prevailing tax laws. Furthermore, as we operate in multiple taxing jurisdictions, the application of tax laws can be subject to diverging and sometimes conflicting interpretations by tax authorities of these jurisdictions. It is not uncommon for taxing authorities in different countries to have conflicting views with respect to, among other things, the characterization and source of income or other tax items, the manner in which the arm’s-length standard is applied for transfer pricing purposes, or with respect to the valuation of intellectual property. The taxing authorities of the jurisdictions in which we operate may challenge our tax treatment of certain items or the methodologies we use for valuing developed technology or intercompany arrangements, which could impact our worldwide effective tax rate and harm our financial position and operating results.

Further, any changes in the tax laws governing our activities may increase our tax expense, the amount of taxes we pay, or both. For example, the Tax Cuts and Jobs Act or the TCJA,(the “TCJA”), enacted on December 22, 2017, significantly reformed the U.S. Tax Code,federal tax code, reducing the U.S. federal corporate income tax rate, making sweeping changes to the rules governing international business operations, and imposing new limitations on a number of tax benefits, including deductions for business interest and the use of net operating loss carryforwards. The Coronavirus Aid, Relief, and Economic SecurityInflation Reduction Act or the CARES Act,of 2022 (the “Inflation Reduction Act”), enacted on March 27, 2020,August 16, 2022, further amended the U.S. federal tax code, including in respectimposing a 15% minimum tax on “adjusted financial statement income” of certain changes that were madecorporations as well as an excise tax on the repurchase or redemption of stock by certain corporations, beginning in the TCJA, generally on a temporary basis.2023 tax year. There can be no assurance that future tax law changes will not increase the rate of the corporate income tax, impose new limitations on deductions, credits or other tax benefits, or make other changes that may adversely affect our business, cash flows or financial performance. For example, proposed legislation before Congress may make changes to the U.S. tax law, including reduced benefits related to the taxation of foreign income and the imposition of a 15% minimum tax on book income. If enacted in their current form, such changes could adversely affect our operations in future periods.

In addition, the IRS has yet to issue guidance on a number of important issues regarding the tax treatment of cryptocurrency and the products we provide to our customers and from which we derive our income. In the absence of such guidance, we will take positions with respect to any such unsettled issues. There is no assurance that the IRS or a court will agree with the positions taken by us, in which case tax penalties and interest may be imposed that could adversely affect our business, cash flows or financial performance.

As a result of these and other factors, the ultimate amount of tax obligations owed may differ from the amounts recorded in our financial statements and any such difference may harm our operating results in future periods in which we change our estimates of our tax obligations or in which the ultimate tax outcome is determined.

Under the recently passed Inflation Reduction Act, our ability to utilize tax deductions or losses from prior years may be limited by the imposition of taxable income annually.the 15% minimum tax if, in future years, such minimum tax applies to us. Therefore, we may be required to pay U.S. federal income taxes in future years despite any future tax deductions or U.S. federal NOLnet operating loss (“NOL”) carryforwards that we have accumulated. There also is a risk that due to statutory or regulatory changes, such as suspensions on the use of NOLs at the state level, or other unforeseen reasons, our future NOLs could expire or otherwise be unavailable to offset future income tax liabilities. For these reasons, we may not be able to realize a tax benefit from the use of any future NOLs we generate, whether or not we continue to generate taxable profits.accumulate.

Revenue generated and expenses incurred from our international operations are often denominated in the currencies of the local countries. Accordingly, changes in the value of foreign currencies relative to the U.S. dollar can affect our revenue and operating results reflected in our U.S. dollar-denominated financial statements. Our financial results are also subject to changes in exchange rates that impact the settlement of transactions in non-localnon-functional currencies. As a result, it could be more difficult to detect underlying trends in our business and operating results. To the extent that fluctuations in currency exchange rates cause our operating results to differ from expectations of investors, the market price of our Class A common stock could be adversely impacted. To date,From time to time, we have not engagedmay engage in currency hedging activities to limit the risk of foreign currency exchange fluctuations. Even ifTo the extent we use derivativehedging instruments to hedge exposure to fluctuations in foreign currency exchange rates, the use of such hedging activitiesinstruments may not offset any or more than a portion of the adverse financial effects of unfavorable movements in foreign exchange rates over the limited time the hedges are in place, and may introduce additional risks if we are unable to structure effective hedges with such instruments.

Natural disasters or other catastrophic events may also cause damage or disruption to our operations, international commerce, and the global economy, and could have an adverse effect on our business, operating results, and financial condition. Our business operations are subject to interruption by natural disasters, fire, power shortages, and other events beyond our control. In addition, our global operations expose us to risks associated with public health crises, such as pandemics and epidemics, which could harm our business and cause our operating results to suffer. For example, the ongoing effects of the COVID-19 pandemic and the precautionary measures that we have adopted have resulted, and could continue to result, in difficulties or changes to our customer support, or create operational or other challenges, any of which could adversely impact our business and operating results. Further, acts of terrorism, labor activism or unrest, and other geopolitical unrest, including the ongoing conflict in Ukraine, could cause disruptions in our business or the businesses of our partners or the economy as a whole. In the event of a natural disaster, including a major earthquake, blizzard, or hurricane, or a catastrophic event such as a fire, power loss, or telecommunications failure, we may be unable to continue our operations and may endure system interruptions, reputational harm, delays in development of our platform, lengthy interruptions in service, breaches of data security, and loss of critical data, all of which could have an adverse effect on our future operating results. We do not maintain insurance sufficient to compensate us for the potentially significant losses that could result from disruptions to our services. Additionally, all the aforementioned risks may be further increased if we do not implement a disaster recovery plan or our partners’ disaster recovery plans prove to be inadequate. To the extent natural disasters or other catastrophic events concurrently impact data centers we rely on in connection with private key restoration, customers will experience significant delays in withdrawing funds, or in the extreme we may suffer loss of customer funds.

As a public company we incur significant legal, accounting, and other expenses. We are subject to reporting requirements of the Exchange Act, the Sarbanes-Oxley Act of 2002, the rules subsequently implemented by the SEC, the rules and regulations of the listing standards of The Nasdaq Stock Market LLC or Nasdaq,(“Nasdaq”) and other applicable securities rules and regulations. Stockholder activism, the current political and social environment and the current high level of government intervention and regulatory reform may lead to substantial new regulations and disclosure obligations, which will likely result in additional compliance costs and could impact the manner in which we operate our business in ways we cannot currently anticipate. Compliance with these rules and regulations may strain our financial and management systems, internal controls, and employees. The Exchange Act requires, among other things, that we file annual, quarterly, and current reports with respect to our business and operating results. Moreover, the Sarbanes-Oxley Act of 2002 requires, among other things, that we maintain effective disclosure controls and procedures, and internal control over financial reporting. In order to maintain and, if required, improve our disclosure controls and procedures, and internal control over financial reporting to meet this standard, significant resources and management oversight may be required. If we encounter material weaknesses or deficiencies in our internal control over financial reporting, we may not detect errors on a timely basis and our consolidated financial statements may be materially misstated. Effective internal control is necessary for us to produce reliable financial reports and is important to prevent fraud.

We have incurred and expect our independent registered public accounting firm will be required to formally attest to the effectiveness of our internal control over financial reporting commencing with our second annual report on Form 10-K. We expectcontinue to incur significant expenses and devote substantial management effort toward ensuring compliance with the annual auditor attestation requirements of Section 404 of the Sarbanes-Oxley Act of 2002. As a result of the complexity involved in complying with the rules and regulations applicable to public companies, our management’s attention may be diverted from other business concerns, which could harm our business, operating results, and financial condition. Although we have already hired additional employees to assist us in complying with these requirements, our finance team is small and we may need to hire more employees in the future, or engage outside consultants, which will increase our operating expenses.

We have funded our operations since inception primarily through debt, equity financings and revenue generated by our products and services. We cannot be certain when or if our operations will generate sufficient cash to fully fund our ongoing operations or the growth of our business. We intend to continue to make investments in our business to respond to business challenges, including developing new products and services, enhancing our operating infrastructure, expanding our international operations, and acquiring complementary businesses and technologies, all of which may require us to secure additional funds. Additional financing may not be available on terms favorable to us, if at all.all, including due to general macroeconomic conditions, crypto market conditions, the 2022 Events or other unforeseen factors. In the event of a downgrade of our credit rating, our ability to raise additional financing may be adversely affected and any future debt offerings or credit arrangements we propose to enter into may be on less favorable terms or terms that may not be acceptable to us. In addition, even if debt financing is available, the cost of additional financing may be significantly higher than our current debt. If we incur additional debt, the debt holders would have rights senior to holders of our common stock to make claims on our assets, and the terms of any debt could restrict our operations, including our ability to pay dividends on our common stock. Furthermore, we have authorized the issuance of “blank check” preferred stock and common stock that our board of directors could use to, among other things, issue shares of our capital stock in the form of blockchain tokens, implement a stockholder rights plan, or issue other shares of preferred stock or common stock. We may issue shares of capital stock, including in the form of blockchain tokens, to our customers in connection with customer reward or loyalty programs. If we issue additional equity securities, including in the form of blockchain tokens, stockholders will experience dilution, and the new equity securities could have rights senior to those of our currently authorized and issued common stock. The trading prices for our common stock may be highly volatile, which may reduce our ability to access capital on favorable terms or at all. In addition, a slowdown or other sustained adverse downturn in the general economic or crypto asset markets could adversely affect our business and the value of our Class A common stock. Because our decision to raise capital in the future will depend on numerous considerations, including factors beyond our control, we cannot predict or estimate the amount, timing, or nature of any future issuances of securities. As a result, our stockholders bear the risk of future issuances of debt or equity securities reducing the value of our Class A common stock and diluting their interests. Our inability to obtain adequate financing or financing on terms satisfactory to us, when we require it, could significantly limit our ability to continue supporting our business growth and responding to business challenges.

Prior to the listing of our Class A common stock on Nasdaq, there was no public market for shares of our Class A common stock. Technology stocks have historically experienced high levels of volatility. The market price of our Class A common stock also could be subject to wide fluctuations in response to the risk factors described in this Annual Report on Form 10-K and others beyond our control, including:

Our Class B common stock has twenty votes per share, and our Class A common stock has one vote per share. Mr. Armstrong is currently able to exercise voting rights with respect to a majority of the voting power of our outstanding capital stock and, along with our directors, other executive officers, and 5% stockholders, and their affiliates, these stockholders hold in the aggregate a substantial majority of the voting power of our capital stock. Because of the twenty-to-one voting ratio between our Class B common stock and our Class A common stock, the holders of our Class B common stock, including Mr. Armstrong, collectively are expected to continue to control a significant percentage of the combined voting power of our common stock and therefore be able to control all matters submitted to our stockholders for approval until the earliest to occur of (i) the date fixed by the board of directors that is no less than 61 days and no more than 180 days after the date that the aggregate number of shares of Class B common stock held by Brian Armstrong and his affiliates is less than 25% of the aggregate number of shares of Class B common stock held by Mr. Armstrong and his affiliates on April 1, 2021, the date of effectiveness of the registration statement on Form S-1 for the listing of our Class A common stock on Nasdaq; (ii) the date and time specified by affirmative vote of the holders of at least 66-2/3% of the outstanding shares of Class B common stock, voting as a single class, and the affirmative vote of at least 66-2/3% of the then serving members of our board of directors, which must include the affirmative vote of Mr. Armstrong, if either (A) Mr. Armstrong is serving on our board of directors and has not been terminated for cause or resigned except for good reason (as each term is defined in our restated certificate of incorporation) from his position as our Chief Executive Officer or (B) Mr. Armstrong has not been removed for cause or resigned from the position of Chairman of the board of directors; and (iii) the death or disability (as defined in our restated certificate of incorporation) of Mr. Armstrong, when all outstanding shares of Class B common stock will convert automatically into shares of Class A common stock. Holders of our Class A common stock are not entitled to vote separately as a single class except under certain limited circumstances. This concentrated control may limit or preclude your ability to influence corporate matters for the foreseeable future, including the election of directors, amendments of our organizational documents, and any merger, consolidation, sale of all or substantially all of our assets, or other major corporate transaction requiring stockholder approval. In addition, this may prevent or discourage unsolicited acquisition proposals or offers for our capital stock that you may believe are in your best interest as one of our stockholders. In addition, Mr. Armstrong has the ability to control the management and major strategic investments of our company as a result of his position as our Chief Executive Officer and his ability to control the election or replacement of our directors. As a board member and officer, Mr. Armstrong owes a fiduciary duty to our stockholders and must act in good faith in a manner he reasonably believes to be in the best interests of our stockholders. As a stockholder, even a controlling stockholder, Mr. Armstrong is entitled to vote his shares, and shares over which he has voting control, in his own interests, which may not always be in the interests of our stockholders generally.

Future transfers by holders of Class B common stock will generally result in those shares converting to Class A common stock, subject to limited exceptions, such as certain transfers effected for estate planning purposes. The conversion of Class B common stock to Class A common stock will have the effect, over time, of increasing the relative voting power of those holders of Class B common stock, including Mr. Armstrong, who retain their shares in the long term. Moreover, it is possible that one or more of the persons or entities holding our Class B common stock could gain significant voting control as other holders of Class B common stock sell or otherwise convert their shares into Class A common stock.

Certain stock index providers, such as S&P Dow Jones, exclude companies with multiple classes of shares of common stock from being added to certain stock indices, including the S&P 500. In addition, several stockholder advisory firms and large institutional investors oppose the use of multiple class structures. As a result, the dual class structure of our common stock may prevent the inclusion of our Class A common stock in such indices, may cause stockholder advisory firms to publish negative commentary about our corporate governance practices or otherwise seek to cause us to change our capital structure, and may result in large institutional investors not purchasing shares of our Class A common stock. Any exclusion from stock indices could result in less demand for our Class A common stock. Any actions or publications by stockholder advisory firms or institutional investors critical of our corporate governance practices or capital structure could also adversely affect the value of our Class A common stock.

The sale or distribution of a substantial number of shares of our Class A common stock, particularly sales by us or our directors, executive officers, and principal stockholders, or the perception that these sales or distributions might occur in large quantities, could cause the market price of our Class A common stock to decline.

As of December 31, 2021,2022, we had 37,207,51231,794,551 options outstanding that, if fully exercised, would result in the issuance of 6,101,0174,501,924 shares of Class B common stock and the issuance of 31,106,49527,292,627 shares of Class A common stock and 7,482,8925,328,671 shares of Class A common stock outstanding subject to restricted stock units, or RSUs. All of the shares of Class A common stock and Class B common stock issuable upon the exercise of stock options or vesting and settlement of RSUs, and reserved for future issuance under our equity incentive plans, have been registered for public resale under the Securities Act of 1933, as amended or the Securities Act.(the “Securities Act”). Accordingly, these shares will be able to be freely sold in the public market upon issuance, subject to applicable vesting requirements and compliance by affiliates with Rule 144 under the Securities Act.

In addition, certain holders of shares of our common stock will have rights, subject to some conditions, to require us to file registration statements for the public resale of shares of Class A common stock or to include such shares in registration statements that we may file for us or other stockholders. Any registration statement we file to register additional shares, whether as a result of registration rights or otherwise, could cause the market price of our Class A common stock to decline or be volatile.

We also may issue our capital stock or securities convertible into our capital stock, including in the form of blockchain tokens, from time to time in connection with a financing, an acquisition, investments, pursuant to customer rewards, loyalty programs, and other incentive plans, or otherwise. Any such issuance could result in substantial dilution to our existing stockholders and cause the market price of our Class A common stock to decline.

The trading market for our Class A common stock may be influenced by the research and reports that securities or industry analysts publish about us or our business, our market, and our competitors. We do not have any control over these analysts. If securities and industry analysts cease coverage of us altogether, the market price for our Class A common stock may be negatively affected. If one or more of the analysts who cover us downgrade our Class A common stock, or publish inaccurate or unfavorable research about our business, the price of our Class A common stock may decline. If one or more of these analysts cease coverage of us or fail to publish reports on us regularly, demand for our Class A common stock could decrease, which might cause our Class A common stock price and trading volume to decline. In light of the unpredictability inherent in our business, our financial outlook commentary may differ from analysts’ expectations, which could cause volatility to the price of our Class A common stock.

We have never declared or paid any cash dividends on any class of our common stock, are not obligated to pay, and do not intend to pay any cash dividends in the foreseeable future. We anticipate that for the foreseeable future we will retain all of our future earnings for use in the development of our business and for general corporate purposes. Any determination to pay dividends in the future will be at the discretion of our board of directors.

Our payment of any dividends will be subject to contractual and legal restrictions and other factors that our board of directors deems relevant. Moreover, agreements governing any future indebtedness of ours may further limit our ability to pay dividends. In addition, our ability to pay dividends is limited by law. There is no assurance that we will be able or that our board of directors will decide to declare any dividends on any class of our common stock.

Accordingly, investors may have to rely on sales of their Class A common stock after price appreciation, which may never occur, as the only way to realize any future gains on their investment.

Provisions in our restated certificate of incorporation and restated bylaws may have the effect of delaying or preventing a merger, acquisition, or other change of control of our company that the stockholders may consider favorable. In addition, because our board of directors is responsible for appointing the members of our management team, these provisions may frustrate or prevent any attempts by our stockholders to replace or remove our current management by making it more difficult for stockholders to replace members of our board of directors. Our restated certificate of incorporation and restated bylaws include provisions that:

Moreover, Section 203 of the Delaware General Corporation Law or the DGCL,(the “DGCL”) may discourage, delay, or prevent a change of control of our company. Section 203 imposes certain restrictions on mergers, business combinations, and other transactions between holders of 15% or more of our common stock and us.

In addition, a third party attempting to acquire us or a substantial position in our common stock may be delayed or ultimately prevented from doing so by change in ownership or control regulations to which our regulated broker-dealer subsidiaries are subject. FINRA Rule 1017 generally provides that FINRA approval must be obtained in connection with any transaction resulting in a single person or entity owning, directly or indirectly, 25% or more of a member firm’s equity and would include a change of control of a parent company.

Our restated certificate of incorporation, to the fullest extent permitted by law, provides that the Court of Chancery of the State of Delaware is the exclusive forum for any derivative action or proceeding brought on our behalf; any action asserting a claim that is based upon a breach of fiduciary duty; any action asserting a claim against us or any current or former director, officer, stockholder, employee or agent of ours, arising pursuant to the DGCL, our restated certificate of incorporation, or our restated bylaws; any action asserting a claim against us that is governed by the internal affairs doctrine; or any action asserting an “internal corporate claim” as defined in Section 115 of the DGCL.

Moreover, Section 22 of the Securities Act creates concurrent jurisdiction for federal and state courts over all claims brought to enforce any duty or liability created by the Securities Act or the rules and regulations thereunder and our restated certificate of incorporation provides that the federal district courts of the United States of America are, to the fullest extent permitted by law, the exclusive forum for resolving any complaint asserting a cause of action arising under the Securities Act, or a Federal Forum Provision, unless we consent in writing to the selection of an alternative forum. Our decision to adopt a Federal Forum Provision followed a decision by the Supreme Court of the State of Delaware holding that such provisions are facially valid under Delaware law. While there can be no assurance that federal or state courts will follow the holding of the Delaware Supreme Court or determine that the Federal Forum Provision should be enforced in a particular case, application of the Federal Forum Provision means that suits brought by our stockholders to enforce any duty or liability created by the Securities Act must be brought in federal court and cannot be brought in state court. Section 27 of the Exchange Act creates exclusive federal jurisdiction over all claims brought to enforce any duty or liability created by the Exchange Act or the rules and regulations thereunder. The Federal Forum Provision applies to suits brought to enforce any duty or liability created by the Exchange Act to the fullest extent permitted by law. Accordingly, actions by our stockholders to enforce any duty or liability created by the Exchange Act or the rules and regulations thereunder must be brought in federal court. Our stockholders will not be deemed to have waived our compliance with the federal securities laws and the regulations promulgated thereunder.

Any person or entity purchasing or otherwise acquiring or holding any interest in any of our securities will be deemed to have notice of and consented to our exclusive forum provisions, including the Federal Forum Provision. These provisions may limit our stockholders’ ability to bring a claim in a judicial forum they find favorable for disputes with us or our directors, officers, or other employees, which may discourage lawsuits against us and our directors, officers, and other employees. Alternatively, if a court were to find the choice of forum provision contained in our restated certificate of incorporation to be inapplicable or unenforceable in an action, we may incur additional costs associated with resolving such action in other jurisdictions, which could harm our business, operating results, and financial condition.

Not applicable.

We are a remote-first company, meaning that for the vast majority of roles, our employees have the option to work remotely. As a result of this strategy, we do not maintain a corporate headquarters, but do maintain physical offices in major cities around the world for purposes of collaboration and team building. We currently lease facilities in various locations in the United States and other countries around the world.

We believe that our facilities are adequate to meet our needs for the immediate future, and that, should we need additional physical office space, suitable additional space will be available in the future.

We define “Verified Users” as all retail users,consumers, institutions, and ecosystem partnersdevelopers that have registered an account on our platform and confirmed either their email address or phone number, or that have established an account with a username on our non-custodial wallet application, as of the date of measurement. Verified Users are an indication of our scale and represent a potential revenue opportunity for us.scale. These customers have demonstrated an interest in our platform or direct intent to transact with crypto assets. Verified Users represent the top level of our customer acquisition funnel. We believe we have an opportunity to engage Verified Users and convert them to MTUs by marketing our growing suite of products and services. Verified Users may overstate the number of unique customers who have registered an account on our platform as one customer may register for, and use, multiple accounts with different email addresses, phone numbers, or usernames.

We define “Assets on Platform” as the total U.S. dollar equivalent valueaggregate of both fiat currency“customer crypto liabilities” and crypto assets held or managed in digital wallets“customer custodial cash liabilities,” each as set forth on our platform, including our custody services, calculated based on the market price on the date of measurement. consolidated balance sheets.

Assets on Platform demonstrates the scale of balances held across our suite of products and services, the trust customers place in us to securely store their assets, and the underlying growth of the cryptoeconomy. Assets on Platform also represent our monetization opportunity for subscription products and services, including current products such as Custody, Stake, Borrow, and Lend. Assets on Platform generate fees that are recorded as subscription and services revenue when customers engage with these products.

As of December 31, 2020,2022 and 2021, no asset other than Bitcoin and Ethereum individually represented more than 10% of our Assets on Platform.

Trading Volume duringdecreased 50% for the year ended December 31, 2021. Approximately 55% of our total Trading Volume came from Other crypto assets, up from 44% in 2020. This trend is consistent with the overall crypto market where crypto assets other than Bitcoin and Ethereum comprised a larger percent of spot market trading volumes during the year ended December 31, 20212022 compared to the year ended December 31, 2020. Additionally, we continue to add trading support2021. The decrease in Trading Volume was driven by steep declines in both average crypto asset prices and total crypto spot market volumes associated with macroeconomic challenges during the year ended December 31, 2022. In addition, Crypto Asset Volatility decreased 32% for new crypto assets, which contributesthe year ended December 31, 2022 compared to the increased trading concentration in Other crypto assets. In 2021 and 2020, we added trading support for 95 and 21 Other crypto assets, respectively.year ended December 31, 2021.

During the years ended December 31, 20212022 and December 31, 2020,2021, no asset other than Bitcoin and Ethereum individually represented more than 10% of our Trading Volume or transaction revenue.

We generate substantially allNet revenue consists of our nettransaction revenue generated from transaction fees from trades that occur on our platform. The transaction fee earned is based on the price and quantity of the crypto asset that is bought, sold, or withdrawn.converted. Transaction revenue is recognized at the time the transaction is processed and is directly correlated with Trading Volume on our platform.Volume.

Subscription and services revenue primarily consists of:

Other revenue also includes interest income earned primarily on our corporate cash and cash equivalents. Interest income is calculated using the interest method and depends on the balance of cash and cash equivalents as well as the prevailing interest rate environment.

Transaction expense includes costs incurred to operate our platform, process crypto asset trades, and perform wallet services. These costs include account verification fees, miner fees to process transactions on blockchain networks, fees paid to payment processors and other financial institutions for customer transaction activity, and crypto asset losses due to transaction reversals. Transaction expense also includes rewards paid to users for blockchainstaking activities conducted by us, such as staking.us. Fixed-fee costs are expensed over the term of the contract and transaction-level costs are expensed as incurred.

Technology and development expenses include personnel-related expenses incurred in operating, maintaining, and enhancing our platform. These costs also include website hosting, infrastructure expenses, costs incurred in developing new products and services and the amortization of acquired developed technology.

Sales and marketing expenses primarily include costs related to customer acquisition, advertising and marketing programs, and personnel-related expenses. Sales and marketing costs are expensed as incurred.

General and administrative expenses include personnel-related expenses incurred to support our business, including legal,executive, customer support, compliance, finance, compliance, human resources, customer support, executive,legal, and other support operations. These costs also include software subscriptions for support services, facilities and equipment costs, depreciation, amortization of acquired customer relationship intangible assets, gains and losses on disposal of fixed assets, legal reserves and settlements, and other general overhead. General and administrative costs are expensed as incurred.

Other operating expense, net includes cost of our crypto assets used to fulfill customer accommodation transactions. Periodically, as an accommodation to customers, we may fulfill customer transactions using our own crypto assets. We have custody and control of the crypto assets prior to the sale to the customer. Accordingly, we record the total value of the sale in other revenue and the cost of the crypto asset in other operating expense.

Other expense (income), net includes the following items:

(Benefit from) provision for income taxes includes income taxes related to foreign jurisdictions and U.S. federal and state income taxes.

The following table summarizes the historical consolidated statements of operations data: