Company: FUFU
Filing Date: 2025-04-21
Form Type: 20-F
Source: 0001213900-25-033733
Chunk: 191

Company: Bitfufu Inc.
Filing Date: 2025-04-21
Form: 20-F
Item: Item 16K
Chunk 191
---
ITEM
16K. CYBERSECURITY

Cybersecurity Risk Management and Strategy

We recognize the importance
of assessing, identifying, and managing material risks associated with cybersecurity threats, as such term is defined in Item 106(a) of
Regulation S-K. These risks include, among other things, operational risks, intellectual property theft, harm to employees or customers
and violation of data privacy or security laws.

We are a holding company and
our operations are conducted through Finfront, with principal executive offices in Singapore. We receive, process, store and transmit,
often electronically, data of customers, much of which is confidential. Cybersecurity risks increase when we transmit information from
one location to another, including over the internet or other electronic networks. We have implemented comprehensive internal policies
and measures for assessing, identifying and managing material risks from cybersecurity threats and monitoring the prevention, detection,
mitigation and remediation of material cybersecurity incidents. We have also
integrated
cybersecurity risk management into our overall
enterprise risk management system. The main internal policies and measures are as follows:

  Risk assessment designed to help identify material cybersecurity risks to our critical systems, information, products and our broader enterprise IT environment;  

  A security team primarily responsible for managing our cybersecurity risk assessment processes, our security control and our responses to cybersecurity incidents;  

  Cybersecurity awareness training of our employees and senior management; and  

  Use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security controls.  

We have implemented a set
of procedures to ensure effective management of the cybersecurity risks associated with the use ofthird-partyservice provider, CrowdStrike
Falcon OverWatch (“ CrowdStrike”), to help us reduce the risk of cybersecurity attacks. Our internal security team conducts
regular inspections on the hunting reports generated by CrowdStrike.

Our digital assets are mined
to and stored in offline cold wallet, which is a physical device that holds digital assets offline and aims to prevent hackers from being
able to access digital assets via traditional internet-hacking means. Access to digital assets in such cold wallet requires separate
authentication from different authorized individuals.

As of the date of this Report, we have not experienced any material cybersecurity incidents or identified any material cybersecurity threatsthat have affected or are
reasonably likely to materially affect our business strategy, results of operations or financial conditions.

However, despite the measures
we have implemented, our miners, systems and procedures, and those of our third-party service providers, may be vulnerable