Risk Disclosures

IMPORTANT RISK SUMMARY The Harvest website, and all related services are experimental technologies and are provided “AS IS.” They may carry significant risks including but not limited to: Bugs, vulnerabilities, or operational failures in smart contracts or the underlying blockchain. Total and irreversible loss of digital assets from cyberattacks, loss of wallet credentials, or website errors. No insurance, guarantee, or compensation is provided by any party associated with this website. Regulatory, tax, or legal risks may apply depending on the User’s location. This information is provided for User awareness and does not constitute financial, legal, or other professional advice. The User should conduct their own due diligence before using the website. Do not use the website unless you fully understand and accept these risks.

This Risk Disclosure statement (the “Disclosure”) is incorporated by reference into, and forms an integral part of, the Terms of Service. All of the terms used in the Disclosure have the same meaning assigned to them in the Terms.

The Operator and any Related Parties (as defined in the Terms) expressly disclaim all liability for any losses or damages arising from or connected to these risks. By accepting the Terms and this Disclosure, you expressly waive and release any present or future claims, known or unknown, against the Operator and its Related Parties in relation to such risks, including claims arising from the Operator’s own negligence.

1. Disclaimer of Warranties

The Platform (including the Website, its App/Toolset and all integrated Third-Party Protocols and Services) is experimental and is provided “AS IS” and “AS AVAILABLE.” The Operator makes no warranty, express or implied, regarding the Platform or its use. Without limiting the foregoing, the Operator and its Related Parties specifically disclaim all warranties, including:

• That the Platform or any related software will be free from defects, vulnerabilities, bugs, exploits, interruptions, errors, or security breaches.

• The implied warranties of merchantability, fitness for a particular purpose, and non-infringement.

2. Operational Risks

The Operator does not warrant that the Website or related software are secure or free from vulnerabilities, defects, errors, or malware. Events outside the Operator's reasonable control (including, but not limited to, cyberattacks, regulatory actions, natural disasters, and technical failures) may impair or prevent access to the Website or Toolset. The Operator reserves the right to modify, suspend, or discontinue the Website or Toolset at any time, without prior notice or liability. No warranty is provided regarding uninterrupted availability. The User is solely responsible for ensuring access to the genuine Website Interface at Harvest.Finance or its official subdomains. Interacting through a compromised or fraudulent interface may result in total and unrecoverable loss of assets or data, and the User hereby waives and releases the Operator from any claim or liability associated therewith, even if caused by the Operator’s negligence.

3. Blockchain Risks

Third-Party Protocol and Service Risks: Third-Party Protocols, Wallets, or Services may undergo updates or changes that materially affect their performance, availability, or security. In addition, these components are highly susceptible to hacking, exploits, or other malicious attacks including lack of liquidity, preventing a user from withdrawing their assets.

Smart Contract Vulnerabilities: The Harvest website is an ease of use tool that allows users to access public blockchain based smart contracts. Smart contracts and blockchain-based software may contain vulnerabilities, design flaws, or coding errors that could result in the partial or total loss of Digital Assets. Exploits may be discovered at any time.

Blockchain Forks and Congestion: Blockchain networks may experience forks that create changes or alternative versions of the Toolset. The Operator has no ability or duty to predict, control, or notify Users of such events, nor does it guarantee which version will be supported. Users are solely responsible for staying informed about forks and managing any risks that may arise. Blockchain networks may also experience congestion, delays, or transaction failures, resulting in higher costs (gas fees) or unsuccessful transactions. Blockchain validators or consensus mechanisms may fail, be attacked, or act maliciously, resulting in disruption, manipulation, or loss.

Systemic Failure: Any malfunction, failure, or abandonment of underlying blockchains (including EVM-compatible chains) may materially affect the operation of the Website and Third-Party Protocols and Services, and consequently impact the availability or functionality of the Website.

Transaction Finality: All blockchain transactions are final, irreversible, and cannot be cancelled, reversed, refunded, blocked, or altered by the Operator or any third party.

Advanced and Undisclosed Risks: Technical advances such as the development of quantum computers may present risks to blockchain systems, the Website, Third-Party Protocols, Wallets, or tokens, including the theft, loss, or inaccessibility of assets.

The Operator disclaims all liability and responsibility regarding these events, as they are outside the Operator's control and may adversely impact User Digital Assets. There is no guarantee that Digital Assets will not be stolen or lost due to hacking, advanced cyber-attacks, denial-of-service incidents, double-spend or flash-loan exploits, programming errors, vulnerabilities in the Website, or flaws in the underlying blockchain networks. Such events may result in the partial or total loss of Digital Assets involved in transactions through the App, and the User hereby waives and releases the Operator from any claim or liability associated therewith, even if caused by the Operator’s own negligence.

4. Third-Party Risks

4.1. Protocol Risk

The Operator does not endorse, control, or assume responsibility for any third-party content, services, or promotions that may be linked to or accessible through this Website. If a User chooses to engage with such third-party offerings, the User does so entirely at their own risk. By accessing them, you hereby waive and release the Operator from any liability arising from such use or participation, even if caused by the Operator's negligence.

The Website provides access to the Harvest toolset . Accordingly, when using the toolset, the User may be exposed to certain risks related to the operation and functioning of the toolset and the Third-Party Protocols with which the Harvest website interacts.

The website is experimental and high-risk, and the Operator disclaims all warranties that its components will function as expected. The User represents and warrants that the User will not use the website to interact with the toolset or Third-Party Services unless the User fully understands their operation and the consequences of the transactions initiated. The website may contain errors or vulnerabilities, fail to meet expectations, or result in financial loss. The website consists of autonomous, decentralized smart contracts deployed on blockchain networks, and is not owned, operated, or controlled by the Operator.

Specific Protocol Dependencies - The website's performance relies on timely and accurate data from but not limited to IPOR Technology, Morpho, and other Third-Party Services. Delays, errors, manipulation, or unavailability of these inputs can lead to suboptimal or harmful liquidity positions. In particular:

• Harvest auto-compounding vaults, or any other integrated auto-compounding solutions, depend on scheduled “harvest” transactions to accrue and compound yield. Network congestion, failed transactions, or changes to underlying strategies in any of these systems may reduce expected performance.

• Morpho vaults are curated and managed by independent third parties. Re-position parameters, risk profiles, and liquidity conditions may change without notice. In rare circumstances, withdrawals may be delayed or restricted due to liquidity shortfalls, market freezes, or governance decisions.

• Supplying USDC, ETH, or any asset into a vault, autocompounder, optimizer, or allocation smart contract, exchanges assets for a vault receipt token (e.g., hUSDC, aMorphoUSDC, vault share tokens), which represents a claim on the underlying strategy and its performance. Access to the underlying asset depends entirely on vault liquidity, strategy solvency, and protocol conditions. If the vault becomes illiquid, paused, or impaired, you may be unable to redeem your vault token, temporarily or permanently.

Frequent repositions via Harvest may incur transaction costs, slippage, or missed yield if vault entry and exit timing is suboptimal. Past performance of the toolset is not indicative of future results. Positions may underperform compared to holding assets in a single vault or other strategy.

The User hereby waives and releases the Operator from any claim or liability arising from any of the risks described in this Section 4, even if such claim is based on the Operator's negligence.

4.2. Third-Party Content

Third-Party Content made available through the Website is provided solely for informational purposes and originates from independent third-party sources that are outside the Operator's control. Such content may be delayed, inaccurate, incomplete, manipulated, or otherwise misleading. The Operator is hereby released from all liability arising from the User’s reliance on or use of Third-Party Content, even if caused by the Operator’s negligence. The User shall independently verify such data and decide whether to transact with the Website.

4.3. Third-Party Wallets

To interact with the toolset through the Website, the User must utilize compatible third-party software or hardware Wallets. These wallets are developed, operated, and maintained solely by independent third parties; the Operator does not own, control, manage, or provide them. The User's use of any third-party wallet is entirely at the User's own risk, and the User is solely responsible for reviewing and complying with their applicable terms, conditions, and policies.

The User is solely responsible for safeguarding wallet credentials, including private keys, seed phrases, and passwords. Loss, compromise, or theft of these credentials may result in the permanent and unrecoverable loss of Digital Assets. The Operator does not provide custodial services. The User retains sole control over the wallet and Digital Assets. If the User loses access to the wallet, no recovery mechanism exists.

Not all wallets may be compatible with the Website or toolset. Using unsupported, insecure, or outdated wallets may result in failed transactions, loss of assets, or inability to access the website and/or toolset, and the User hereby waives and releases the Operator from any claim or liability associated therewith, even if caused by the Operator’s negligence.

4.4. Third-Party Costs

The User's utilization of the toolset or Wallets is subject to Third-Party Costs, which may include, but are not limited to: performance, management, protocol, or transaction fees; blockchain network costs such as gas fees; fees related to Third-Party Services; and any other comparable third-party expenses.

Changes in Third-Party Costs represent a financial risk that may materially reduce expected performance or returns. The Operator is not responsible for controlling, calculating, or notifying the User of any Third-Party Costs.

The User hereby waives and releases the Operator from any claim or liability arising from or related to the imposition of any Third-Party Costs or the resulting reduction in financial performance, even if such claim is based on the Operator’s negligence.

5. No Insurance or Government Backing

Digital assets and transactions made through the website are not protected by any deposit insurance or by any government-backed program, agency, or authority.

6. Audit Status

Some of the toolset’s utilized smart contracts have been reviewed by independent security auditors. These audit reports are available at https://github.com/harvestfi/audits/blob/main/Halborn-Harvest-2025.pdf. However, an audit does not guarantee the absence of bugs or vulnerabilities.

The User acknowledges and accepts that an audit is only one measure of due diligence, and the Operator provides no warranty regarding the completeness, accuracy, or efficacy of any audit. The User assumes all risk associated with the use of the website and/or application, regardless of the audit status.

Smart contract risks remain, and the User could lose all their Digital Assets. The Operator is hereby released from any claim or liability arising from or related to vulnerabilities, errors, or bugs in the applications code, even if such loss is caused by the Operator’s negligence.

7. Market Risks

Digital Assets are highly volatile and subject to sudden fluctuations in value. Significant losses may occur in short periods of time. The Operator expressly disclaims any guarantee or warranty that any Digital Asset will retain its value, achieve a particular price, or generate profits. The value of Digital Assets depends on external factors beyond the Operator’s control, which may negatively impact their stability or desirability.

Certain assets or protocols may lack sufficient liquidity, making it difficult or impossible to exit a position without incurring significant losses.

References to “optimized positions,” “improved performance,” or similar descriptions reflect historical or intended functionality only and do not guarantee results. Past performance is not indicative of future outcomes.

The User hereby accepts and assumes all financial and market risk associated with the use of the website, and waives and releases the Operator from any claim or liability for financial losses resulting from market conditions or volatility, even if such loss is caused by the Operator’s negligence.

8. Regulatory Risks

The legal and regulatory status of blockchain technologies, digital assets, and decentralized finance is uncertain in many jurisdictions and subject to change. Changes in law or enforcement could restrict or prevent the User’s use of the Website, and Third-Party Protocols, Wallets, or other Third-Party Services. The User is solely responsible for ensuring their use complies with applicable laws in the User's relevant jurisdictions.

Access to the Website is prohibited for residents, citizens, or entities from Restricted Jurisdictions or Restricted Persons (as defined in the Terms). Use in violation of these restrictions may expose the User to significant legal, regulatory, or enforcement risks, for which the Operator bears no responsibility.

Transactions involving Digital Assets may trigger tax consequences, such as income taxes, capital gains, VAT, or other fiscal obligations. The User is solely responsible for evaluating, declaring, and paying all applicable taxes. The Operator does not provide tax advice, has not assessed potential tax outcomes, and expressly disclaims all responsibility and liability for the User’s tax burdens or compliance.

9. Incident Reporting and Transparency

The Website aims to maintain transparency and may disclose material incidents affecting the toolset or its integrated Third-Party Services. Such disclosure does not constitute an acceptance or admission of responsibility or liability on the part of the Operator for any resulting losses.

10. Mitigation Measures

The website utilizes internal mitigation measures, such as integrating audited smart contracts (where available) and sourcing from reputable protocols. The User acknowledges and accepts that these measures cannot eliminate all risks. The User represents and warrants that they shall remain vigilant and fully informed regarding all risks.

The Operator makes no warranty or guarantee that these mitigation measures are effective or complete, and the User assumes all risk of loss regardless of their implementation.