What Zymeworks, Inc. told the SEC could break it.

Nearly all of Zymeworks' revenue is non-recurring upfront/expansion/milestone payments and royalties from a small set of licensing/collaboration agreements (R&D collaboration revenue was $106.0M in 2025), and it depends on Jazz, BeOne and J&J to develop and commercialize zanidatamab (Ziihera) and other candidates. Its future financial returns — up to $1.51B in potential milestones plus tiered royalties — will depend in significant part on Jazz's (and BeOne's/J&J's) performance, which is largely beyond Zymeworks' control. If a key collaboration underperforms or is terminated, Zymeworks could be delayed in or unable to commercialize zanidatamab and would lose the associated milestone/royalty revenue. A partner-concentration/dependence risk (the individual partners are captured as named edges).

“Therefore, our success, and any associated financial returns to us and our investors, will depend in significant part on Jazz's performance under the Amended Jazz Collaboration Agreement.”

Zymeworks relies entirely on third-party contract manufacturing organizations (CMOs) to provide manufacturing, linker-toxin conjugation, and fill-finish services to generate all of the therapeutic antibody supply for its clinical studies and R&D. Specialized antibody-drug-conjugate steps (linker-toxin conjugation, sterile fill-finish) have a limited qualified CMO base, so a failure, capacity constraint, quality issue, or inability to contract on reasonable terms could prevent Zymeworks from supplying sufficient product candidate or cause substantial delays, materially harming its programs. CMOs are not individually named, so a sole-source/CMO-dependence risk.

“We rely on third-party contract manufacturing organizations to provide manufacturing, linker-toxin conjugation, and fill-finish services in order to generate all of the therapeutic antibody supply required for our clinical studies and other research and development activities.”

The U.S. Department of Justice's Data Security Program places limitations on (and in some cases prohibits) certain contracts involving transfers of sensitive personal data to business partners located in China or with specified China links, and requires contractual commitments restricting onward transfers. As Zymeworks collaborates with BeOne (its Asia partner, with China operations) and runs cross-border clinical programs (e.g., China BLA approvals for zanidatamab), these rules could constrain data-sharing with China-linked partners, add compliance burden, or complicate its Asia collaboration. A distinctive U.S.-China data-security/cross-border regulatory exposure.

“(and in some cases prohibits) certain contracts involving transfers of sensitive personal data to business partners”