Bullish has received SOC 1 Type 1 and SOC 2 Type 1 reports

Gibraltar and Frankfurt – October 22, 2025 - Bullish (NYSE:BLSH), an institutionally focused global digital asset platform that provides market infrastructure and information services, received System and Organization Controls (SOC) 1 Type 1 and SOC 2 Type 1 reports following the completion of examination engagements conducted by Deloitte¹ . The reports are for internal controls related to the digital assets exchange and associated custody services offered to customers onboarded with Bullish (GI) Ltd and Bullish Europe GmbH (formerly Bullish DE Custody GmbH), as of December 31, 2024. They are available to Bullish’s customers and their independent auditors subject to terms and conditions.

The SOC framework, developed by the American Institute of Certified Public Accountants (AICPA), is a suite of service offerings CPAs may provide in connection with system-level controls of a service organization or entity-level controls of other organizations.

“In the rapidly evolving digital asset landscape, providing our customers with reasonable assurance regarding our operational controls and security is paramount,” said Chris Tyrer, President of Bullish Exchange. “Our teams across Frankfurt, Gibraltar, New York, Hong Kong, and beyond, have worked tirelessly to align with these globally recognized standards for SOC examinations and ensure these controls are adhered to across our operational jurisdictions.”

Since its launch in November 2021, Bullish has surpassed $1.5 trillion in cumulative trading volume. In 2025, the platform executes over $2 billion in average daily volume and ranks in the top five exchanges by spot volume for Bitcoin and Ether². Bullish has become a top-tier, institutionally-focused digital assets exchange, that offers best execution in crypto’s biggest assets and deep, deterministic liquidity from its automated market maker. The business is licensed by the New York State Department of Financial Services, German Federal Financial Supervisory Authority, Hong Kong Securities and Futures Commission, and the Gibraltar Financial Services Commission. Bullish Europe is regulated under MiCAR as a crypto asset service provider offering spot trading and custody services for digital assets.

¹ Deloitte Touche Tohmatsu

² Included exchanges comprised of the venues included in CF Benchmark Index and Fidelity Bitcoin Reference Price.

‍

Media contact

media@bullish.com

‍

About Bullish

Bullish is an institutionally focused global digital asset platform that provides market infrastructure and information services. Bullish services are regulated in the United States, European Union, United Kingdom, Hong Kong, and Gibraltar. These include: Bullish Exchange – a regulated and institutionally focused digital assets spot and derivatives exchange, integrating a high-performance central limit order book matching engine with automated market making to provide deep and predictable liquidity. CoinDesk Indices – a collection of tradable proprietary and single-asset benchmarks and indices that track the performance of digital assets for global institutions in the digital assets and traditional finance industries. CoinDesk Data – a broad suite of digital assets market data and analytics, providing real-time insights into prices, trends, and market dynamics. CoinDesk Insights – a digital asset media and events provider and operator of Coindesk.com, a digital media platform that covers news and insights about digital assets, the underlying markets, policy, and blockchain technology.

For more information, please visit bullish.com and follow LinkedIn and X.

‍

Use of Websites to Distribute Material Company Information

We use the Bullish Investor Relations website (investors.bullish.com) and our X account (x.com/bullish) to publicize information relevant to investors, including information that may be deemed material, in addition to filings we make with the U.S. Securities and Exchange Commission (SEC) and press releases. We encourage investors to regularly review the information posted on our website and X account in addition to our SEC filings and press releases to be informed of the latest developments.

‍

Forward-Looking Statements

This press release contains “forward-looking statements” within the meaning of the Private Securities Litigation Reform Act of 1995. Sentences containing words such as “believe,” “intend,” “plan,” “may,” “expect,” “should,” “could,” “anticipate,” “estimate,” “predict,” “project,” or their negatives, or other similar expressions of a future or forward-looking nature generally should be considered forward-looking statements and include, without limitation, statements relating to future events or Bullish’s future financial or operating performance, business strategy, and potential market opportunity. Such forward-looking statements are based upon estimates and assumptions that, while considered reasonable by Bullish, are inherently uncertain and are subject to risks, uncertainties, and other factors which could cause actual results to differ materially from those expressed or implied by such forward-looking statements. Factors that may cause results to differ from those expressed in our forward-looking statements include, but are not limited, to our ability to grow our business and operations, including in new geographic locations, the costs or expenditures associated therewith, competition in our industry, and the evolving rules and regulations applicable to digital assets and our industry. You should not place undue reliance on any such forward-looking statements, which speak only as of the date they are made, and Bullish undertakes no duty to update these forward-looking statements.