Polyrizon (PLRZ) updates 20-F, outlines $464,000 cyber fraud response

Rhea-AI Filing Summary

Polyrizon Ltd. filed an amended Form 20-F to correct Item 15 and reaffirm that its disclosure controls and procedures were effective as of December 31, 2025. Management also concluded that internal control over financial reporting was effective under the COSO 2013 framework, with no auditor attestation required due to emerging growth company status.

The report describes a cybersecurity-related business email compromise in October 2025 that caused a wire transfer of approximately $464,000 to the wrong account, and a second attempted fraud in December 2025 that was prevented. The company reports the incident did not have a material impact but may lead to additional investigation and remediation costs, and outlines new verification and cybersecurity measures adopted in response.

Insights

Governance and risk analyst

Amended controls wording and disclosed a non‑material cyber fraud incident.

Polyrizon is correcting its annual report to update management’s conclusion on disclosure controls, confirming they were effective at year-end 2025. Internal control over financial reporting was also deemed effective using the COSO 2013 framework, and there is no auditor attestation because the company qualifies as an emerging growth company.

The filing details a business email compromise in October 2025 that led to an erroneous wire of approximately $464,000, plus a prevented attempt in December 2025. The company states the incident was not material to its business or financial condition, but notes potential additional costs for investigation, remediation and recovery efforts.

Management describes strengthened controls such as out-of-band verification of wire changes, bank call-backs, and remediation of the compromised email account. For investors, the key takeaway is clearer disclosure around control effectiveness and cyber risk, rather than a quantified financial impact change.

UNITED STATES
SECURITIES AND EXCHANGE COMMISSION
WASHINGTON, DC 20549

FORM 20-F/A

☐ REGISTRATION STATEMENT PURSUANT TO SECTION 12(b) OR (g) OF THE SECURITIES EXCHANGE ACT OF 1934

OR

☒ ANNUAL REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the fiscal year ended December 31, 2025

OR

☐ TRANSITION REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

OR

☐ SHELL COMPANY REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

Date of event requiring this shell company report ____________

For the transition period from ____________ to ____________

Commission File No.: 001-42375

Polyrizon Ltd.

(Exact name of registrant as specified in its charter)

Translation of registrant’s name into English: Not applicable

State of Israel		8 HaPnina Street Raanana, 4321545, Israel
(Jurisdiction of incorporation or organization)		(Address of principal executive offices)

Tomer Izraeli

Chief Executive Officer

8 HaPnina Street, Raanana, 4321545, Israel

Tel: +972-9-3740120

Email: IR@polyrizon-biotech.com

(Name, Telephone, E-mail and/or Facsimile number and Address of Company Contact Person)

Securities registered or to be registered pursuant to Section 12(b) of the Act:

Title of each class to be registered		Trading Symbol(s)		Name of each exchange on which each class is to be registered
Ordinary Shares, no par value per share		PLRZ		The Nasdaq Stock Market LLC

Securities registered or to be registered pursuant to Section 12(g) of the Act: None

Securities for which there is a reporting obligation pursuant to Section 15(d) of the Act: None

Number of outstanding shares of each of the issuer’s classes of capital or common stock as of December 31, 2025: 1,608,266 Ordinary Shares.

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. Yes ☐ No ☒

If this report is an annual or transition report, indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or 15(d) of the Exchange Act of 1934. Yes ☐ No ☒

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Exchange Act during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes ☐ No ☒

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T during the preceding 12 months. Yes ☒ No ☐

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, or an emerging growth company.

Large accelerated filer  ☐	Accelerated filer  ☐	Non-accelerated filer  ☒
		Emerging Growth Company  ☒

If an emerging growth company that prepares its financial statements in accordance with U.S. GAAP, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 7(a)(2)(B) of the Securities Act. ☐

†The term “new or revised financial accounting standard” refers to any update issued by the Financial Accounting Standards Board to its Accounting Standards Codification after April 5, 2012.

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☐

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements. ☐

Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive based compensation received by any of the registrant’s executive officers during the relevant recovery period pursuant to §240.10D-1(b). ☐

Indicate by check mark which basis of accounting the registrant has used to prepare the financial statements included in this filing.

U.S. GAAP ☒ International Financial Reporting
Standards as issued by the International
Accounting Standards Board ☐ Other ☐

If “Other” has been checked in response to the previous question, indicate by check mark which financial statement item the registrant has elected to follow. ☐ Item 17 ☐ Item 18

If this is an annual report, indicate by check mark whether the registrant is a shell company. Yes ☐ No ☒

EXPLANATORY NOTE

This Amendment No. 1 on Form 20-F (the "Form 20-F/A") amends the annual report on Form 20-F of Polyrizon Ltd. (the "Company") for the fiscal year ended December 31, 2025, originally filed with the U.S. Securities and Exchange Commission ("SEC") on March 25, 2026 (the "Form 20-F"). This Form 20-F/A is being filed to amend Item 15 of Part II of the Form 20-F to revise management's conclusion with respect to its evaluation of the effectiveness of the Company's disclosure controls and procedures, as defined in Rules 13a-15(e) and 15d-15(e) of the Securities Exchange Act of 1934, as amended (the "Exchange Act"). Item 15 (a) was inadvertently not updated in connection with the filing of the Form 20-F filed on March 25, 2026 (the "Form 20-F").

Other than as set forth herein, this Form 20-F/A speaks as of the original filing date of the Form 20-F on March 25, 2026, and this Form 20-F/A does not, and does not purport to, amend, update or restate any other information or disclosure included in the Form 20-F or reflect any events that have occurred since March 25, 2026.

1

PART II

ITEM 13. DEFAULTS, DIVIDEND ARREARAGES AND DELINQUENCIES

None.

ITEM 14. MATERIAL MODIFICATIONS TO THE RIGHTS OF SECURITY HOLDERS AND USE OF PROCEEDS

There are no material modifications to the rights of security holders.

ITEM 15. CONTROLS AND PROCEDURES

(a) Disclosure Controls and Procedures

Our management, with the participation of our Chief Executive Officer and Chief Financial Officer, has evaluated the effectiveness of our disclosure controls and procedures (as such term is defined in Rules 13a-15(e) and 15d-15(e) under the Exchange Act) as of December 31, 2025, or the Evaluation Date. Based on such evaluation, those officers have concluded that, as of the Evaluation Date, our disclosure controls and procedures are effective in recording, processing, summarizing and reporting, on a timely basis, information required to be included in periodic filings under the Exchange Act and that such information is accumulated and communicated to management, including our principal executive and financial officers, as appropriate to allow timely decisions regarding required disclosure.

(b) Management’s Annual Report on Internal Control over Financial Reporting

Our management, including our CEO, and our CFO, is responsible for establishing and maintaining adequate internal control over our financial reporting, as defined in Rules 13a-15(f) and 15d-15(f) of the Exchange Act of 1934, as amended. Our internal control over financial reporting is a process designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles. Internal control over financial reporting includes policies and procedures that:

● pertain to the maintenance of records that in reasonable detail accurately and fairly reflect our transactions and asset dispositions;

● provide reasonable assurance that transactions are recorded as necessary to permit the preparation of our financial statements in accordance with generally accepted accounting principles;

● provide reasonable assurance that receipts and expenditures are made only in accordance with authorizations of our management and board of directors (as appropriate); and

● provide reasonable assurance regarding the prevention or timely detection of unauthorized acquisition, use or disposition of assets that could have a material effect on our financial statements.

Due to its inherent limitations, internal controls over financial reporting may not prevent or detect misstatements. In addition, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate.

Under the supervision and with the participation of our management, including our CEO, and our CFO, we assessed the effectiveness of our internal control over financial reporting as of December 31, 2025 based on the framework for Internal Control-Integrated Framework set forth by The Committee of Sponsoring Organizations of the Treadway Commission (COSO) (2013).

2

Based on our assessment and this framework, our management concluded that our internal control over financial reporting was effective as of December 31, 2025.

(c) Attestation Report of the Registered Public Accounting Firm

This Annual Report on Form 20-F does not include an attestation report of our independent registered public accounting firm regarding internal control over financial reporting due to an exemption for emerging growth companies provided in the JOBS Act.

(d) Changes in Internal Control over Financial Reporting

During 2025, the Company took steps to establish and maintain its Internal Control over financial reporting. Except as described above, during the year ended December 31, 2025, there were no changes in our internal control over financial reporting that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.

ITEM 16. [RESERVED]

Not applicable.

ITEM 16A. AUDIT COMMITTEE FINANCIAL EXPERT

Our Audit Committee is currently comprised of Mr. Yehonatan Zalman Vinokur, Mr. Assaf Itzhaik, and Ms. Liat Sidi, and is chaired by Mr. Assaf Itzhaik. Our board of directors has determined that each of the members of the committee are financially literate and meets the independence requirements for directors, including the heightened independence standards for members of the Audit Committee under Rule 10A-3 under the Exchange Act. Our board of directors has determined that each of the members of the committee are “financially sophisticated” within the meaning of the Nasdaq Rules and a “financial expert” as defined by Rule 10A-3 under the Exchange Act.

ITEM 16B. CODE OF ETHICS

Our board of directors has adopted a Code of Business Conduct and Ethics applicable to all of our directors and employees, including our Chief Executive Officer, Chief Financial Officer, controller or principal accounting officer, or other persons performing similar functions, which is a “code of ethics” as defined in Item 16B of Form 20-F promulgated by the SEC. The full text of our code of business conduct and ethics is available under the Governance section of our website at https://investor.polyrizon-biotech.com/. In addition, we intend to post on our website all disclosures that are required by law or the Nasdaq Rules concerning any amendments to, or waivers from, any provision of the code. The reference to our website address does not constitute incorporation by reference of the information contained at or available through our website, and you should not consider it to be a part of this Annual Report on Form 20-F.

ITEM 16C. PRINCIPAL ACCOUNTANT FEES AND SERVICES

Brightman Almagor Zohar & Co., a Firm in the Deloitte Global Network, or Deloitte Israel, an independent registered public accounting firm, has served as our principal independent registered public accounting firm for the years ended December 31, 2025, and 2024.

3

The following table provides information regarding fees paid or to be paid by us to Brightman Almagor Zohar & Co. for the years ended December 31, 2025 and 2024:

		Year Ended December 31,
(Dollars)		2025				2024
Audit fees (1)		$	100,000			$	100,000
Audit-related fees (2)			50,000				35,000
Tax fees (3)			20,154				-
All other fees			-
Total			170,154				135,000

(1)	Audit fees consist of professional services provided in connection with the audit of our annual financial statements.
(2)	Audit-related fees in 2024 and 2025 include consents and a comfort letter.
(3)	Tax fees consist of fees for professional services for tax compliance, tax advice, and tax audits

Pre-Approval of Auditors’ Compensation

Our audit committee has a pre-approval policy for the engagement of our independent registered public accounting firm to perform certain audit and non-audit services. Pursuant to this policy, which is designed to assure that such engagements do not impair the independence of our auditors, the audit committee pre-approves annually a catalog of specific audit and non-audit services in the categories of audit services, audit-related services and tax services that may be performed by our independent registered public accounting firm. If a type of service, that is to be provided by our auditors, has not received such general pre-approval, it will require specific pre-approval by our audit committee. The policy prohibits retention of the independent registered public accounting firm to perform the prohibited non-audit functions defined in applicable SEC rules.

ITEM 16D. EXEMPTIONS FROM THE LISTING STANDARDS FOR AUDIT COMMITTEES

Not applicable.

ITEM 16E. PURCHASES OF EQUITY SECURITIES BY THE ISSUER AND AFFILIATED PURCHASERS

Not applicable.

ITEM 16F. CHANGE IN REGISTRANT’S CERTIFYING ACCOUNTANT

Not applicable. 

ITEM 16G. CORPORATE GOVERNANCE

We are a “foreign private issuer”, as such term is defined in Rule 405 under the Securities Act. As a foreign private issuer we are permitted to comply with Israeli corporate governance practices instead of the corporate governance rules of Nasdaq, provided that we disclose which requirements we are not following and the equivalent Israeli requirement.

Corporations incorporated under the laws of the State of Israel whose shares are publicly traded, including companies with shares listed on Nasdaq, are considered public companies under Israeli law and are required to comply with various corporate governance requirement under Israeli law relating to such matters as the composition and responsibilities of the audit committee and the compensation committee (subject to certain exceptions we intend to utilize), and a requirement to have an internal auditor. These requirements are in addition to the corporate governance requirements imposed by the rules of the Nasdaq Stock Market and other applicable provisions of the U.S. securities laws to which we are subject (as a foreign private issuer). Under those rules, we may elect to follow certain corporate governance practices permitted under the Companies Law in lieu of compliance with corresponding corporate governance requirements otherwise imposed by the Nasdaq Stock Market rules for U.S. domestic issuers.

4

In accordance with Israeli law and practice and subject to the exemption set forth in Rule 5615 of the Nasdaq Stock Market rules, we have elected to follow the provisions of the Companies Law, rather than the Nasdaq Stock Market rules, with respect to the following requirements:

● Quorum. While the Nasdaq Stock Market rules require that the quorum for purposes of any meeting of the holders of a listed company’s ordinary voting stock, as specified in the company’s bylaws, be no less than 33 1/3% of the company’s outstanding ordinary voting stock, under Israeli law, a company is entitled to determine in its articles of association the number of shareholders and percentage of holdings required for a quorum at a shareholders meeting. Our Articles provide that a quorum of two or more shareholders holding at least 25% of the voting rights in person or by proxy is required for commencement of business at a general meeting. However, the quorum set forth in our Articles with respect to an adjourned meeting consists of at least one shareholders present in person or by proxy.

● Compensation of officers. Israeli law and our Articles do not require that the independent members of our board of directors (or a compensation committee composed solely of independent members of our board of directors) determine an executive officer’s compensation, as is generally required under the Nasdaq Stock Market rules with respect to the chief executive officer and all other executive officers. Instead, compensation of executive officers is determined and approved by our compensation committee and our board of directors, and in certain circumstances by our shareholders, either in consistency with our office holder compensation policy or, in special circumstances in deviation therefrom, taking into account certain considerations stated in the Companies Law. See “Management—Board Practices—Approval of Related Party Transactions under Israeli Law” for additional information.

● Shareholder approval. We will seek shareholder approval for all corporate actions requiring such approval under the requirements of the Companies Law, rather than seeking approval for corporation actions in accordance with Nasdaq Listing Rule 5635. In particular, under this Nasdaq Stock Market rule, shareholder approval is generally required for: (i) an acquisition of shares/assets of another company that involves the issuance of 20% or more of the acquirer’s shares or voting rights or if a director, officer or 5% shareholder has greater than a 5% interest in the target company or the consideration to be received; (ii) the issuance of shares leading to a change of control; (iii) adoption/amendment of equity compensation arrangements (although under the provisions of the Companies Law there is no requirement for shareholder approval for the adoption/amendment of the equity compensation plan); and (iv) issuances of 20% or more of the shares or voting rights (including securities convertible into, or exercisable for, equity) of a listed company via a private placement (and/or via sales by directors/officers/5% shareholders) if such equity is issued (or sold) at below the greater of the book or market value of shares. By contrast, under the Companies Law, shareholder approval is required for, among other things: (i) transactions with directors concerning the terms of their service or indemnification, exemption and insurance for their service (or for any other position that they may hold at a company), for which approvals of the compensation committee, board of directors and shareholders are all required, (ii) extraordinary transactions with controlling shareholders of publicly held companies, which require the special approval, and (iii) terms of employment or other engagement of the controlling shareholder of us or such controlling shareholder’s relative, which require special approval. In addition, under the Companies Law, a merger requires approval of the shareholders of each of the merging companies. Further, we intend to adopt and approve equity incentive plans and, to the extent required, material changes thereto in accordance with the Companies Law, which does not impose a requirement of shareholder approval for such actions. In addition, we intend to follow Israeli corporate governance practice instead of the Nasdaq corporate governance rule which requires shareholder approval prior to an issuance of securities in connection with equity-based compensation of officers, directors, employees or consultants.

● Approval of Related Party Transactions. All related party transactions are approved in accordance with the requirements and procedures for approval of interested party acts and transaction as set forth in the Companies Law, which requires the approval of the audit committee, or the compensation committee, as the case may be, the board of directors and shareholders, as may be applicable, for specified transactions, rather than approval by the audit committee or other independent body of our board of directors as required under the Nasdaq Stock Market rules. See “Management—Board Practices—Approval of Related Party Transactions under Israeli Law” for additional information.

5

● Annual Shareholders Meeting.  As opposed to the Nasdaq Stock Market Rule 5620(a), which mandates that a listed company hold its annual shareholders meeting within one year of the company’s fiscal year-end, we are required, under the Companies Law, to hold an annual shareholders meeting each calendar year and within 15 months of the last annual shareholders meeting.

● Distribution of periodic reports to shareholders; proxy solicitation. As opposed to the Nasdaq Stock Market rules, which require listed issuers to make such reports available to shareholders in one of a number of specific manners, Israeli law does not require us to distribute periodic reports directly to shareholders, and the generally accepted business practice in Israel is not to distribute such reports to shareholders but to make such reports available through a public website. In addition to making such reports available on a public website, we currently make our audited financial statements available to our shareholders at our offices and will only mail such reports to shareholders upon request. As a foreign private issuer, we are generally exempt from the SEC’s proxy solicitation rules.   Equity Compensation Plans. We do not necessarily seek shareholder approval for the establishment of, and amendments to, stock option or equity compensation plans (as set forth in Nasdaq Listing Rule 5635(c)), as such matters are not subject to shareholder approval under Israeli law and practice. However, any equity-based compensation arrangement with a director or the chief executive officer or the material amendment of such an arrangement must be approved by our compensation committee, board of directors and shareholders, in that order.   Nomination of Directors. We follow Israeli corporate governance practices instead of the requirements of the Nasdaq Rules with regard to the nomination committee and director nomination procedures. Israeli law and practice does not require director nominations to be made by a nominating committee of our board of directors consisting solely of independent directors, as required under the Nasdaq Rules. In accordance with Israeli law and practice, directors are recommended by our board of directors for election by our shareholders (other than directors elected by our board of directors to fill a vacancy), and certain of our shareholders may nominate candidates for election as directors by the general meeting of shareholders in accordance with the Companies Law and our Articles of Association.   We otherwise intend to comply with the rules generally applicable to U.S. domestic companies listed on Nasdaq. We may, however, in the future decide to rely upon the “foreign private issuer exemption” for purposes of opting out of some or all of the other corporate governance rules.

ITEM 16H. MINE SAFETY DISCLOSURE

Not applicable.

ITEM 16I. DISCLOSURE REGARDING FOREIGN JURISDICTIONS THAT PREVENT INSPECTIONS

Not applicable.

ITEM 16J. INSIDER TRADING POLICIES

We have adopted a statement of trading policies that governs the trading in our securities by our directors, officers and certain other covered persons, and which is reasonably designed to promote compliance with applicable insider trading laws, rules and regulations, and any listing standards applicable to the Company. A copy of the Insider Trading Policy is included as Exhibit 11.1 to this annual report. In addition, with regard to any trading in our own securities, it is our policy to comply with the federal securities laws and the applicable exchange listing requirements.

6

ITEM 16K. CYBERSECURITY

Our board of directors recognizes the critical importance of maintaining the trust and confidence of our customers, clients, business partners and employees. In general, we seek to address IT general controls cybersecurity risks through a comprehensive, cross-functional approach that is focused on preserving the confidentiality, security and availability of the information that we collect and store by identifying, preventing and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur.

Risk Management and Strategy

We engage a third-party provider to maintain our IT systems, and our management participates in the assessment and identification of any risks from cybersecurity threats. Our third-party provider monitors our systems and reports any issues to us. Our board of directors, together with the audit committee, are engaged in our cybersecurity monitoring managed by our third-party provider. Any issues are appropriately addressed timely. We have adopted a wire transfer verification policy designed to mitigate the risk of fraudulent payment instructions. Under this policy, we have implemented a wire transfer verification policy requiring out-of-band authentication for changes to payment instructions and are reconfirming supplier banking details while requesting bank confirmation for wire transfers. In addition a general risk assessment occurs annually, or as business needs change, and covers identification of risks that could act against the company’s objectives as well as specific risks related to a compromise to the security of data. Most of the information generated and collected by us is stored and maintained by third party vendors and service providers. We believe that each of these providers has its own cybersecurity protocols to which our management believes to be adequate for protecting our files in their possession. See “Item 3.D Risk Factors—General Risk Factors—Our business and operations would suffer in the event of computer system failures, cyber attacks or a deficiency in our cybersecurity.”

The level of each identified risk is determined by considering the impact of the risk itself and the likelihood of the risk materializing and high scoring risks are actioned upon. Risks are analyzed to determine whether the risk meets company risk acceptance criteria to be accepted or whether a mitigation plan will be applied. Mitigation plans include both the individual or department responsible for the plan and may include budget considerations. 

In October 2025, we determined that we had been the victim of criminal fraud commonly referred to as “Business Email Compromise,” which involved email impersonation and the transmission of fraudulent wire instructions to members of our management in connection with an investment transaction. As a result, we initiated a wire transfer of approximately $464,000 to an account that was not owned by the intended recipient.

Following the incident, we promptly activated our response procedures, including notifying appropriate internal stakeholders (including our audit committee), engaging legal counsel and a third-party cybersecurity firm to support the investigation, and coordinating with relevant financial institutions and authorities. At that time, based on the information available, we determined that there had been no third-party access to our certain management member’s email account.

In December 2025, we identified and prevented a subsequent attempted fraud involving new, fraudulent wire instructions in connection with a payment to a supplier. Following this second incident and additional investigation, we determined that there had, in fact, been unauthorized access to certain member of our management’s email account, including the utilization of unauthorized mail-forwarding rules. We remediated and re-secured the impacted email account, including removal of unauthorized mail-forwarding rules, and implemented additional safeguards intended to reduce the risk of recurrence. We also engaged U.S. external counsel with expertise in this area to facilitate outreach to, and support an investigation by the FBI. 

The incident did not have a material impact on our business, financial condition or results of operations as of the date of this annual report; however, we may incur additional costs in connection with the investigation, remediation efforts and any related recovery actions.

Following the October incident, we implemented a new transfer policy and controls intended to reduce the risk of recurrence, including (i) requiring out-of-band verification initiated by us (and, as appropriate, video confirmation) for any change to wire instructions, (ii) reviewing and reconfirming existing supplier wire instructions, and (iii) requesting our bank to require telephonic confirmation from us prior to executing wire transfers. Following the December incident, we also remediated and re-secured the impacted email account, including removal of unauthorized mail-forwarding rules, and we identified and prevented subsequent attempted fraudulent transfer requests.

Governance

The oversight of cybersecurity threats is undertaken by our external information technology consultant, who holds over a decade of experience in information technology and the design and architecture of information systems, and is supported by management. Our consultant is responsible for assessing and managing cyber risk management, informs senior management regarding the prevention, detection, mitigation, and remediation of cybersecurity incidents and supervises such efforts. Our audit committee is responsible for cybersecurity oversight and monitoring risk. Our audit committee receives updates on IT general controls, and a set of policies and procedures that govern how our IT systems operate and ensure the confidentiality, integrity, and availability of data as well as on cybersecurity risks, including prevention of data theft, unauthorized access, operational disruption, and data breaches. Our management also receives prompt and timely information regarding any cybersecurity incident that meets established reporting thresholds, as well as ongoing updates regarding any such incident until it has been addressed. Our management provides the audit committee updates regarding cybersecurity, including any incidents and remediation efforts.

7

EXHIBIT NUMBER		EXHIBIT DESCRIPTION
1.1		Amended and Restated Articles of Association of Polyrizon Ltd., as currently in effect (filed as Exhibit 99.1 to our Report on Form 6-K as filed with the Securities and Exchange Commission on April 17, 2025, and incorporated herein by reference).
2.1**		Description of Securities
4.1		Polyrizon Ltd. Amended and Restated Equity Incentive Plan. (filed as Exhibit 99.1 to our Registration Statement on Form S-8 (File No.: 333-284410) as filed with the Securities and Exchange Commission on January 22, 2025, and incorporated herein by reference).
4.2		Form of Indemnification Agreement (filed as Exhibit 10.2 to our Registration Statement on Form F-1 (File No.: 333-266745) as filed with the Securities and Exchange Commission on October 6, 2022, and incorporated herein by reference).
4.3		Compensation Policy (filed as Exhibit 10.3 to our Registration Statement on Form F-1 (File No.: 333-266745) as filed with the Securities and Exchange Commission on August 10, 2022, and incorporated herein by reference).
4.4		Form of Simple Agreement for Future Equity (filed as Exhibit 10.4 to our Registration Statement on Form F-1 (File No.: 333-266745) as filed with the Securities and Exchange Commission on August 10, 2022, and incorporated herein by reference).
4.5^		Collaboration Agreement with Nurexone Biologic Inc. (filed as Exhibit 10.5 to our Registration Statement on Form F-1 (File No.: 333-266745) as filed with the Securities and Exchange Commission on October 6, 2022, and incorporated herein by reference).
4.6^		Collaboration Agreement with SciSparc Ltd. (filed as Exhibit 10.6 to our Registration Statement on Form F-1 (File No.: 333-266745) as filed with the Securities and Exchange Commission on October 6, 2022, and incorporated herein by reference).
4.7		Share Purchase Agreement, dated July 15, 2020, with XYLO TECHNOLOGIES LTD. (filed as Exhibit 10.7 to our Registration Statement on Form F-1 (File No.: 333-266745) as filed with the Securities and Exchange Commission on May 20, 2024, and incorporated herein by reference).
4.8		First Addendum to Share Purchase Agreement, dated December 15, 2021, with XYLO TECHNOLOGIES LTD. (filed as Exhibit 10.8 to our Registration Statement on Form F-1 (File No.: 333-266745) as filed with the Securities and Exchange Commission on May 20, 2024, and incorporated herein by reference).
4.9		Second Addendum to Share Purchase Agreement, dated December 23, 2021, with XYLO TECHNOLOGIES LTD. (filed as Exhibit 10.9 to our Registration Statement on Form F-1/(File No.: 333-266745) as filed with the Securities and Exchange Commission on May 20, 2024, and incorporated herein by reference).
4.10		Third Addendum to Share Purchase Agreement, dated November 21, 2023, with XYLO TECHNOLOGIES LTD. (filed as Exhibit 10.10 to our Registration Statement on Form F-1 (File No.: 333-266745) as filed with the Securities and Exchange Commission on May 20, 2024, and incorporated herein by reference).
4.11		Fourth Addendum to Share Purchase Agreement, dated May 7, 2024, with XYLO TECHNOLOGIES LTD. (filed as Exhibit 10.11 to our Registration Statement on Form F-1 (File No.: 333-266745) as filed with the Securities and Exchange Commission on May 20, 2024, and incorporated herein by reference).
4.12		Share Purchase Agreement dated June 20, 2023. (filed as Exhibit 10.12 to our Registration Statement on Form F-1 (File No.: 333-266745) as filed with the Securities and Exchange Commission on May 20, 2024, and incorporated herein by reference).
4.13		Share Purchase Agreement dated December 19, 2023. (filed as Exhibit 10.13 to our Registration Statement on Form F-1 (File No.: 333-266745) as filed with the Securities and Exchange Commission on May 20, 2024, and incorporated herein by reference).
4.14		Share Purchase Agreement dated May 12, 2024. (filed as Exhibit 10.14 to our Registration Statement on Form F-1 (File No.: 333-266745) as filed with the Securities and Exchange Commission on May 20, 2024, and incorporated herein by reference).
4.15		License Agreement with SciSparc Ltd. (filed as Exhibit 10.15 to our Registration Statement on Form F-1 (File No.: 333-266745) as filed with the Securities and Exchange Commission on August 14, 2024, and incorporated herein by reference).
4.16		Convertible Loan Agreement between Polyrizon Ltd. and Certain Shareholders dated February 4, 2023. (filed as Exhibit 10.16 to our Registration Statement on Form F-1 (File No.: 333-266745) as filed with the Securities and Exchange Commission on August 14, 2024, and incorporated herein by reference).
4.17		Convertible Loan Agreement between Polyrizon Ltd. and L.I.A Pure Capital Ltd. dated April 10, 2024. (filed as Exhibit 10.17 to our Registration Statement on Form F-1(File No.: 333-266745) as filed with the Securities and Exchange Commission on August 14, 2024, and incorporated herein by reference).

8

4.18		Convertible Loan Agreement between Polyrizon Ltd. and L.I.A Pure Capital Ltd. and Reuven Srugo Construction Company Ltd dated August 13, 2024. (filed as Exhibit 10.18 to our Registration Statement on Form F-1 (File No.: 333-266745) as filed with the Securities and Exchange Commission on August 14, 2024, and incorporated herein by reference).
4.19		Form of Warrant (filed as Exhibit 4.1 to our Registration Statement on Form F-1 (File No.: 333-266745) as filed with the Securities and Exchange Commission on September 9, 2024, and incorporated herein by reference).
4.20		Form of Pre-Funded Warrant (filed as Exhibit 4.3 to our Registration Statement on Form F-1 (File No.: 333-266745) as filed with the Securities and Exchange Commission on August 14, 2024, and incorporated herein by reference).
4.21		Form of Warrant Agent Agreement (filed as Exhibit 4.2 to our Registration Statement on Form F-1 (File No.: 333-266745) as filed with the Securities and Exchange Commission on August 14, 2024, and incorporated herein by reference).
4.22		Form of Securities Purchase Agreement (incorporated herein by reference to Exhibit 10.1 to the registrant’s Report on Form 6-K furnished to the SEC on April 1, 2025)
4.23		Form of Series A Warrant (incorporated herein by reference to Exhibit 10.2 to the registrant’s Report on Form 6-K furnished to the SEC on April 1, 2025)
4.24		Form of Pre-Funded Warrant (incorporated herein by reference to Exhibit 10.3 to the registrant’s Report on Form 6-K furnished to the SEC on April 1, 2025)
4.25		Form of Placement Agent Agreement (incorporated herein by reference to Exhibit 10.4 to the registrant’s Report on Form 6-K furnished to the SEC on April 1, 2025)
4.26		Form of Registration Rights Agreement (incorporated herein by reference to Exhibit 10.5 to the registrant’s Report on Form 6-K furnished to the SEC on April 1, 2025)
4.27		Form of Exchange Agreement (incorporated herein by reference to Exhibit 10.6 to the registrant’s Report on Form 6-K furnished to the SEC on April 1, 2025)
4.28		Form of Securities Purchase Agreement (incorporated herein by reference to Exhibit 10.1 to the registrant’s Report on Form 6-K furnished to the SEC on December 5, 2025)
11.1**		Insider Trading Policy
12.1*		Certification of the Chief Executive Officer pursuant to rule 13a-14(a) of the Securities Exchange Act of 1934
12.2*		Certification of the Chief Financial Officer pursuant to rule 13a-14(a) of the Securities Exchange Act of 1934
13.1*		Certification of the Chief Executive Officer pursuant to 18 U.S.C. 1350
13.2*		Certification of the Chief Financial Officer pursuant to 18 U.S.C. 1350
15.1**		Consent of Brightman Almagor Zohar & Co., a Firm in the Deloitte Global Network, independent registered public accounting firm
97.1**		Executive Officer Clawback Policy
101.INS		Inline XBRL Instance Document
101.SCH		Inline XBRL Taxonomy Extension Schema Document
101.CAL		Inline XBRL Taxonomy Extension Calculation Linkbase Document
101.DEF		Inline XBRL Taxonomy Extension Definition Linkbase Document
101.LAB		Inline XBRL Taxonomy Extension Label Linkbase Document
101.PRE		Inline XBRL Taxonomy Extension Presentation Linkbase Document
104		Cover Page Interactive Data File (embedded within the Inline XBRL document)

*	Filed herewith.
**	Previously Filed.

^ Portions of this exhibit (indicated by asterisks) have been omitted under rules of the U.S. Securities and Exchange Commission permitting the confidential treatment of select information.

9

SIGNATURES

The registrant hereby certifies that it meets all of the requirements for filing on Form 20-F/A and that it has duly caused and authorized the undersigned to sign this Annual Report on Form 20-F/A filed on its behalf.

	POLYRIZON LTD.
Date: March 27, 2026	By:	/s/ Tomer Izraeli
		Tomer Izraeli
		Chief Executive Officer

10

0001893645 true FY 0001893645 2025-01-01 2025-12-31 0001893645 dei:BusinessContactMember 2025-01-01 2025-12-31 0001893645 2025-12-31 xbrli:shares

FAQ

What is the purpose of Polyrizon (PLRZ) filing this Form 20-F/A amendment?

The amendment updates Item 15 to revise management’s conclusion on disclosure controls and procedures. It confirms these controls were effective as of December 31, 2025, without changing other parts of the original annual report or restating previously reported financial information.

How did Polyrizon (PLRZ) assess its internal control over financial reporting?

Management, including the CEO and CFO, evaluated internal control over financial reporting as of December 31, 2025 using the COSO 2013 framework. They concluded controls were effective, providing reasonable assurance on financial reporting reliability and conformity with generally accepted accounting principles for external reporting.

Did Polyrizon’s auditors provide an attestation on internal control effectiveness?

No. The annual report states there is no attestation report from the independent registered public accounting firm on internal control over financial reporting. Polyrizon relies on an exemption available to emerging growth companies under the JOBS Act, which removes this attestation requirement for qualifying issuers.

What cybersecurity incident did Polyrizon (PLRZ) disclose in its annual report?

Polyrizon disclosed an October 2025 business email compromise involving fraudulent wire instructions tied to an investment transaction, leading to a transfer of approximately $464,000 to an incorrect account. A later attempted fraud in December 2025 was detected and prevented after further investigation and account remediation.

Did the cybersecurity fraud have a material impact on Polyrizon’s results?

The company states the incident did not have a material impact on its business, financial condition or results of operations as of the report date. However, it may incur additional costs for investigation, remediation measures and any related recovery or enforcement actions undertaken with authorities and financial institutions.

What steps has Polyrizon taken to strengthen cybersecurity and wire transfer controls?

Polyrizon implemented stricter wire transfer verification, including out-of-band and, when appropriate, video confirmation of instruction changes, supplier detail reconfirmation, and bank call-back requirements. It also re-secured the affected email account, removed unauthorized mail-forwarding rules, and continues working with external cybersecurity experts and counsel.

How much did Polyrizon pay its auditors in 2025 and what services were included?

For 2025, Polyrizon reports total fees of $170,154 to Brightman Almagor Zohar & Co. Audit fees were $100,000, audit-related fees $50,000, and tax fees $20,154. Audit-related services included items such as consents and a comfort letter supporting capital markets and reporting activities.