Coinbase Global, Inc. (COIN) — what changed in its 10-K risk factors
Item 1A Risk Factors, 10-K 2026-02-12 vs 2025-02-13. The material changes, ranked.
Removed Risk of SEC lawsuit over Coinbase's own platform — "An adverse resolution of the June 2023 SEC Complaint could have a material impact on our business, operating results and financial condition." This specific litigation risk was dropped, signaling the SEC enforcement action has been resolved.
New MiCA license obtained and operational compliance obligations now concrete — "MiCA introduces a comprehensive authorization and compliance regime…which will impact our operations in the European Union, including through localization requirements, due to the obligations associated with our MiCA license (obtained in June 2025)." Prior filing described MiCA as forward-looking; now Coinbase holds an actual license with live compliance burdens.
New Event contracts explicitly called out as a distinct regulatory risk — "our event contract products, which allow customers to trade on the outcome of future events, are subject to complex and evolving legal and regulatory frameworks and interpretation" and "Any fraudulent or manipulative activity in a crypto asset or other regulated product, including event contracts." This reflects Coinbase's Deribit acquisition and expanded derivatives exposure.
Escalated AI risk disclosure expanded to include financial-data accuracy and regulatory compliance failures — prior language omitted "including with respect to financial data"; new language adds that AI outputs may be "incorrect, including with respect to financial data," raising the stakes of AI errors to core business functions.
Removed Concentration risk from a small number of high-volume users was explicitly flagged — "A relatively small number of institutional market makers and high-transaction volume consumer customers account for a significant amount of the Trading Volume…the loss of these users…could have an adverse effect." This named risk section was deleted entirely.