Company: SCLXW
Filing Date: 2025-11-14
Form Type: 424B3
Source: 0001193125-25-283329
Chunk: 157

Company: Scilex Holding Co
Filing Date: 2025-11-14
Form: 424B3
Chunk 157
---
 affected customers. Similarly, in November 2022, hackers exploited weaknesses in the security architecture of the FTX Trading digital asset exchange and reportedly stole over $400 million in digital assets from customers. A successful security breach or cyberattack could result in:

a partial or total loss of our cryptocurrency in a manner that may not be covered by insurance or the liability provisions of the custody agreements with the custodians who hold our cryptocurrency;

harm to our reputation and brand;

improper disclosure of data and violations of applicable data privacy and other laws; or

significant regulatory scrutiny, investigations, fines, penalties, and other legal, regulatory, contractual and financial exposure.

Further, any actual or perceived data security breach or cybersecurity attack directed at other companies with digital assets or companies that operate digital asset networks, regardless of whether we are directly impacted, could lead to a general loss of confidence in the broader cryptocurrency ecosystem or in the use of the cryptocurrency network to conduct financial transactions, which could negatively impact us.

Attacks upon systems across a variety of industries, including industries related to cryptocurrency, are increasing in frequency, persistence, and sophistication, and, in many cases, are being conducted by sophisticated, well-funded and

<div align='center'>91</div>

organized groups and individuals, including state actors. The techniques used to obtain unauthorized, improper or illegal access to systems and information (including personal data and digital assets), disable or degrade services, or sabotage systems are constantly evolving, may be difficult to detect quickly, and often are not recognized or detected until after they have been launched against a target. These attacks may occur on our systems or those of our third-party service providers or partners. We may experience breaches of our security measures due to human error, malfeasance, insider threats, system errors or vulnerabilities or other irregularities. In particular, we expect that unauthorized parties will attempt to gain access to our systems and facilities, as well as those of our partners and third-party service providers, through various means, such as hacking, social engineering, phishing and fraud. Threats can come from a variety of sources, including criminal hackers, hacktivists, state-sponsored intrusions, industrial espionage, and insiders. In addition, certain types of attacks could harm us even if our systems are left undisturbed. For example, certain threats are designed to remain dormant or undetectable, sometimes for extended periods of time, or until launched against a target and we may not be able to implement adequate preventative measures. Further, there has been an increase in such activities