Risk Disclosure — Binibit

Effective date: 2 June 2026 · Version: 1.0

This Risk Disclosure Statement is issued by BINIBIT S.A. (Mercantile Folio No. 155781130, Republic of Panama) (“Binibit”) and forms part of the Terms of Service. It describes the principal risks of using our crypto-to-crypto spot exchange and custodial wallet services (the “Services”). It is not exhaustive, and you should not deal in crypto-assets unless you understand and accept these risks. Do not transact with funds you cannot afford to lose.

1. No advice

Binibit provides an execution-only service. We do not provide investment, financial, legal, tax or other advice, and nothing on the Platform is a recommendation. You are solely responsible for your decisions and for assessing whether any transaction is suitable for you.

2. Volatility and risk of total loss

Crypto-asset prices can move sharply and unpredictably, including to zero. You may lose some or all of the value of your assets. Many crypto-assets have no intrinsic value, no issuer obligation behind them, and may have limited or no liquidity, which can make them difficult to sell at a fair price or at all.

3. Not a bank; no insurance or guarantee

Binibit is not a bank or deposit-taking institution. Your account is not a bank account. Your crypto-assets are not deposits and are not covered by any deposit-insurance, investor-compensation or similar protection scheme in any jurisdiction. There is no government or third-party guarantee of your assets.

4. Irreversibility of transactions

Crypto transactions recorded on a public blockchain are generally final and cannot be reversed. If you send assets to an incorrect, incompatible or unsupported address, or enter wrong network details, your assets may be permanently lost and cannot be recovered by us.

5. Custody risk

While title to your Supported Crypto-Assets remains with you and we hold them for your benefit (and not as our property), custody is still subject to operational and security risks, including cyber-attacks, internal or external theft, key-management failures and technology faults. Assets may be held in pooled/omnibus wallets together with other customers’ assets.

6. Market, liquidity and execution risk

Markets may be illiquid or disorderly. Orders may experience slippage, partial fills, delays or non-execution, particularly during periods of high volatility or volume. Prices shown on the Platform govern the valuation of your account and may differ from prices elsewhere.

7. Technology and cybersecurity risk

Crypto-assets depend on blockchain networks and software that may contain defects or be subject to congestion, downtime, “51%” or other attacks, protocol changes and smart-contract vulnerabilities. The Platform itself may be targeted by hacking, malware or phishing. You are responsible for securing your own devices and credentials.

8. Forks, airdrops and network changes

We are under no obligation to support any fork, airdrop, migration, or newly created or wrapped asset, and we decide at our discretion whether and how to do so. If you wish to participate in such an event, withdraw the relevant asset to your own private wallet well in advance. You may lose access to forked/airdropped assets we do not support.

9. Regulatory and legal risk

The legal and regulatory treatment of crypto-assets is uncertain and evolving and varies by jurisdiction. Crypto-assets are generally not legal tender. Future legal or regulatory changes — including restrictions, bans, tax changes or licensing requirements — may adversely affect the Services or the value, use or transferability of your assets, possibly at short notice.

10. Availability and operational risk

We do not guarantee that the Platform will be continuous, uninterrupted, timely or error-free. Access may be degraded or suspended during maintenance, upgrades, high load, extreme volatility, force-majeure events or for compliance or security reasons, and you may be unable to transact or withdraw during such periods.

11. Third-party risk

The Services rely on third parties, including blockchain networks, custody and security providers, the identity-verification provider Sumsub, and other vendors. We are not responsible for the acts, omissions, failures or insolvency of third parties or networks outside our control.

12. Loss of credentials and unauthorised access

If you lose your credentials or they are compromised, you may permanently lose access to your account or assets. Any instruction made with your correct credentials is treated as authorised by you. Prompt notification of a suspected breach does not guarantee recovery or reversal.

13. Specific asset risks

Some crypto-assets carry heightened risk. Stablecoins may lose their peg and are only as reliable as their issuer and reserves. Low-capitalisation, “meme” or newly listed assets are highly speculative, may be illiquid and may be subject to manipulation; you should not expect any profit or return.

14. Compliance actions

To comply with Applicable Law and manage financial-crime and security risk, we may freeze, hold, decline, reverse or report transactions and restrict or suspend accounts, sometimes without prior notice. Such actions may prevent you from accessing or transferring your assets for a period of time.

15. Tax

You are solely responsible for determining, reporting and paying any taxes applicable to your activity. The tax treatment of crypto-assets is complex and may change.

16. Your acknowledgement

By using the Services you confirm that you have read and understood this Statement, that you accept these risks, and that you are using the Services on your own judgement and at your own risk.

BINIBIT S.A. · Global Bank Tower, 18th Floor, Suite 1801, 50th Street, Panama City, Republic of Panama · support@binibit.com