Cobo vs Prime Trust

Cobo structures its offering around three primary custody architectures: Cobo Custody, Cobo MPC Co-Managed, and Cobo Argus. The fully custodial branch operates as a traditional regulated custodian where Cobo manages private key storage, cold vaults, and on-chain settlement. For teams requiring sovereign control without single points of failure, the MPC solution uses threshold signature schemes to distribute key shares across the customer, Cobo, and an independent recovery party. The Argus solution extends custody logic directly to Ethereum virtual machine chains, enabling automated decentralized finance permissions, strategy automation, and role-based access to on-chain protocols without relinquishing core administrative rights.

Across these architectures, Cobo supports more than 80 layer-1 and layer-2 blockchains alongside thousands of fungible tokens and digital assets. This breadth covers major ecosystems including Bitcoin, Ethereum, Solana, Cosmos, Avalanche, and modern rollup networks. In addition to raw key management, Cobo integrates Wallet-as-a-Service APIs that let fintech applications, exchanges, and gaming platforms programmatically provision deposit addresses, automate withdrawal lifecycles, and handle sweeping operations across heterogeneous blockchain protocols without maintaining standalone full node fleets.

Prime Trust operated primarily as a business-to-business custodial infrastructure provider rather than a direct retail wallet interface. Its core product suite delivered enterprise application programming interfaces designed to allow partner firms to embed fiat on-ramps, automated clearing house settlement, wire transfers, and digital asset custody into their proprietary consumer applications. Through these endpoints, corporate clients could establish individual sub-accounts for their end users, effectively outsourcing their regulatory custody requirements, anti-money laundering frameworks, and know-your-customer verification workflows to Prime Trust's regulated trust structure.

The platform supported major digital currencies including Bitcoin, Ethereum, and standard ERC-20 tokens, alongside fiat treasury management tools. Prime Trust also supplied liquidity routing, counterparty settlement systems, and automated compliance screening to streamline digital asset transactions for partner applications. While this integration model offered speed to market for emerging fintech startups, it created systemic structural dependencies. End users interacting with consumer investment apps frequently held assets directly within Prime Trust omnibus and sub-custodial accounts without direct technical control over the underlying private keys or clear visibility into the administrative layer handling cold storage transfers.

Pricing at Cobo follows institutional convention rather than a uniform retail rate card. Costs are determined through commercial proposals based on chosen custody models, monthly transaction volumes, developer API thresholds, and total assets under custody. Fully custodial cold-storage setups generally incur recurring asset-based basis-point fees paired with standard transaction processing charges. In contrast, the MPC Wallet-as-a-Service tier often blends fixed monthly infrastructure licensing tiers with variable consumption fees pegged to active monthly wallet addresses, API call volumes, or signature generations.

Network transaction fees for deposits, transfers, and sweeping remain subject to underlying blockchain conditions. Cobo allows administrators to configure automated gas management and transaction acceleration routines across supported networks. Withdrawals undergo structured multi-step approvals based on organizational policies before broadcast to the network. Organizations running high-throughput payment gateways or exchange deposit sweeping can optimize gas expenditures through Cobo batching routines, though high on-chain congestion will naturally elevate base network settlement costs regardless of internal infrastructure efficiency.

Commercial terms at Prime Trust were structured through tailored enterprise contracts rather than fixed retail pricing schedules. Partner organizations paid recurring monthly account maintenance charges, API access fees, and variable transaction fees based on transaction volume across banking rails and blockchain networks. Digital asset transfers incurred dynamic network gas fees alongside internal custody processing costs, while fiat movements were billed based on the underlying rail, including automated clearing house debits, domestic wires, and international foreign exchange transfers.

Withdrawal workflows depended entirely on API-driven requests submitted by partner platforms or administrative authorization within enterprise dashboards. When operating normally, settlement between fiat balances and digital assets occurred through integrated liquidity partners and banking networks. However, systemic operational failures disrupted standard withdrawal mechanics when administrative access to legacy cold storage addresses was mismanaged. During the escalation of its solvency crisis, the Nevada Financial Institutions Division ordered the freezing of account distributions, halting all customer withdrawal requests and initiating receivership procedures that completely suspended standard transaction settlement.

Cobo builds its security posture on independent technical certifications, hardware security modules, and advanced cryptography. The provider maintains SOC 2 Type II attestation and adheres to ISO 27001 data management protocols. Within its MPC infrastructure, key shares are generated and held across isolated environments, ensuring no single entity possesses the complete private key at any stage during generation, signing, or rotation. Hardware isolation mechanisms and secure enclaves further restrict unauthorized extraction of sensitive runtime memory or cryptographic components.

Organizational governance is enforced through a granular rule engine. Administrators can construct conditional approval workflows involving multi-person quorums, geographic restrictions, IP address allowlists, time locks, and per-token spending limits. Smart contract interactions can be restricted to verified protocol contracts, blocking arbitrary smart contract executions. For disaster recovery, Cobo provides clear disaster contingency protocols, allowing clients to reconstruct key pairs independently if primary service connectivity becomes compromised, though recovery speed depends on client key share integrity.

The security framework promoted by Prime Trust relied on a combination of cold storage vaults, multi-party computation configurations, and warm wallet layers to service ongoing transaction liquidity. Enterprise accounts offered role-based access management, multi-factor authentication, and rule-based approval workflows for organizational treasury movements. Institutional clients could establish multi-signature requirements on specific corporate balances, aiming to mitigate unauthorized withdrawal attempts and helps support internal organizational oversight across administrative teams.

Despite these structural controls, severe operational and governance deficiencies emerged within the firm's physical key management practices. Regulatory filings revealed that Prime Trust lost access to specific legacy cold storage wallets after changing key generation configurations in 2019, while continuing to accept customer deposits into unreachable public addresses. To satisfy customer withdrawal requests without operational access to those stored funds, corporate management reportedly purchased replacement tokens using fiat deposits from commingled client funds. This breakdown in internal asset separation, key recovery procedures, and treasury audits fundamentally compromised the security baseline of the custodial architecture.

Headquartered in Singapore and founded in 2017, Cobo operates globally while navigating jurisdictional compliance mandates. The company maintains regulatory registrations in relevant operating hubs and enforces comprehensive Know Your Business screening before provisioning production environments. Prospective clients must submit verifiable corporate formation documents, ownership charts, and compliance identity verifications for authorized signatories and system administrators. Organizations domiciled in sanctioned regions or non-compliant jurisdictions are excluded from onboarding under global anti-money laundering frameworks.

Enterprise clients receive structured technical support through dedicated account managers, engineering integration channels, and round-the-clock emergency escalation pathways. Cobo provides software development kits across major programming languages, detailed REST API documentation, and staging sandbox environments for integration testing. While developer resources are robust, routine inquiries require navigating enterprise ticketing systems, making real-time troubleshooting reliant on the specific service tier negotiated in the commercial service agreement.

Prime Trust operated under a trust company charter issued by the Nevada Financial Institutions Division, authorizing it to provide fiduciary custody and financial escrow services within state regulatory guidelines. While state trust charters require regular examinations, capital reserve ratios, and compliance with anti-money laundering standards, the trust company was not an insured bank, meaning client holdings were not shielded by federal deposit insurance programs like the Federal Deposit Insurance Corporation against institutional insolvency.

In June 2023, following an investigation that identified a severe asset deficit between client liabilities and available reserves, the Nevada Financial Institutions Division issued a formal cease-and-desist order, halting all custodial operations. State authorities subsequently petitioned the Eighth Judicial District Court of Nevada to place Prime Trust into receivership to protect remaining assets. The entity subsequently filed for voluntary Chapter 11 bankruptcy protection in the United States Bankruptcy Court for the District of Delaware. Customer support channels, administrative portals, and enterprise technical support have since been decommissioned under the oversight of court-appointed trustees.