VERSE PRESS

Crypto News, Global First.

Cobo Launches AI Agent Wallet With MPC Guardrails as Industry Breach Losses Mount

Singapore-based custody firm Cobo released its Agentic Wallet on April 20, according to The Block, bringing structured policy controls to AI-driven onchain transactions at a moment when AI agent security incidents have already cost the industry tens of millions of dollars in 2026.

|

The product allows AI agents to execute crypto transactions independently, but only within boundaries set in advance by their operators. The key mechanism is a system Cobo calls "Pacts." Before any transaction can run, a Pact must define the agent's intent, its execution plan, the policies it must follow, and its completion conditions. Nothing executes outside that framework.

The timing is not coincidental. In January 2026, Solana-based DeFi portfolio manager Step Finance lost approximately $40 million (over 261,000 SOL) after attackers compromised executive devices and exploited AI agent access paths. Recovery efforts reclaimed only approximately $4.7 million of the $40 million lost. The platform's native token fell roughly 97% and the service shut down. Separately, KuCoin research documented approximately $45 million in losses tied to an AI-generated deepfake social engineering campaign targeting Coinbase users during the same period, a distinct threat vector that manipulated humans rather than exploiting autonomous systems directly.

Broader research from KuCoin identified three dominant attack vectors in AI agent systems: memory poisoning (planting sleeper commands in an agent's stored context), indirect prompt injection (hiding malicious instructions inside market data or web pages), and shared API key abuse. That last issue affected 45.6% of teams running AI agents. The same KuCoin report found that 88% of organisations using AI agents in crypto had confirmed or suspected a security incident.

How the Signing Architecture Works

Cobo's security model relies on Multi-Party Computation (MPC), a cryptographic technique that splits signing authority so no single party can move funds alone. The wallet operates on two thresholds. For routine Pact-authorized actions, the agent signs jointly with Cobo. For high-value transactions or governance decisions, a human must co-sign with Cobo instead. This human-in-the-loop override is what differentiates the product from a fully autonomous system. Cobo reports it has secured $3.8 trillion in assets and created 200 million wallets across eight years without a breach. The company also holds regulatory licenses across five jurisdictions: the United States, Singapore, Hong Kong, Lithuania, and a provisional license in Dubai. For institutional clients in regulated markets, multi-jurisdiction licensing is increasingly a prerequisite before onboarding custody infrastructure.

The wallet connects to more than 80 blockchains, including Ethereum, Solana, Base, Arbitrum, Polygon, BNB Chain, Avalanche, and Optimism. DeFi protocol integrations include Uniswap V3, Aave V3, Compound V3, and Jupiter on Solana. For developers, Cobo provides Python and TypeScript SDKs, REST APIs, MCP (Model Context Protocol) support, and compatibility with major AI frameworks including LangChain, OpenAI Agents, CrewAI, and Agno. The Python SDK is publicly available on GitHub as CoboGlobal/cobo-agentic-wallet-python-sdk.

One additional integration worth noting: the wallet supports the x402 payment protocol, a standard developed by Coinbase and Cloudflare that allows agents to make stablecoin micropayments directly over HTTP. As of April 2026, daily x402 volume sits at approximately $28,000.

The use case is agents autonomously paying for data feeds, compute time, or API access without human billing intervention.

Cobo co-founder and CTO Changhao Jiang, who is presenting on agentic finance at the Hong Kong Web3 Festival this week, framed the broader stakes in a recent LinkedIn post: "Autonomous systems don't just execute transactions, but actively make decisions based on predefined policies, real-time data, and evolving market conditions," adding that "security must evolve from reactive controls to embedded, always-on verification."

Relevance for India and Africa

The product lands in a market where two of Verse Press's core coverage regions are building fastest. India now represents 15.2% of all Web3 developers globally and 17% of all new entrants in 2026, according to a Hashed Emergent report. Developer interest inside India is clustering at the two areas this wallet targets most directly: DeFi at 36.6% of builder focus and AI combined with Web3 at 33.2%. Cobo's SDKs and compatibility with widely used frameworks like LangChain lower the barrier for Indian teams already working in those spaces. India received over $120 billion in remittances in 2024, making the x402 stablecoin micropayment layer directly relevant to Indian fintech builders working on cross-border payment corridors. For institutional counterparties across South and Southeast Asia that require regulatory touchpoints before onboarding custody infrastructure, Cobo's licensing under Singapore's Monetary Authority of Singapore provides a meaningful legitimacy signal.

Sub-Saharan Africa presents a different but equally direct use case. The region recorded more than $205 billion in onchain value between July 2024 and June 2025, a 52% year-over-year increase. Nigeria, ranked second in the Global Crypto Adoption Index, leads the world in DeFi service inflows at more than $30 billion and accounts for roughly 40% of stablecoin flows across the region. Africa now has 207 tracked AI startups, with Nigeria, South Africa, and Kenya together hosting 63% of them.

Three significant regulatory developments frame this environment for institutional players. Nigeria's Investment and Securities Act, enacted in April 2025, formally recognised digital assets under securities law. Kenya's Virtual Asset Service Providers Act, passed in October 2025, established a dedicated licensing framework for crypto businesses. South Africa has advanced a progressive licensing regime for crypto asset service providers. These frameworks mean that institutional-grade wallet infrastructure like Cobo's operates within an increasingly defined legal context across the continent's leading crypto markets.

For fintech operators in Lagos or Nairobi managing stablecoin liquidity or cross-border settlement without round-the-clock staff, policy-enforced agent execution reduces both operational risk and the cost of human oversight. The Step Finance collapse is a recent and vivid cautionary example for any founder building on similar rails. The Solana Foundation has reported more than 15 million onchain agent transactions processed on its network, a figure that illustrates the scale of activity these security guardrails must now manage, particularly relevant given that Step Finance was Solana-based and Cobo's DeFi integrations include Jupiter on Solana.

The x402 micropayment layer is also relevant in both markets. In regions where broken payment rails, limited banking infrastructure, and costly cross-border corridors create friction at every step, the ability for an agent to pay in USDC for external data or services in real time addresses a concrete operational problem. For Indian builders working on remittance corridors or Nigerian operators managing stablecoin liquidity against naira instability, programmable micropayments in stable digital currency reduce both cost and counterparty dependency.

What Comes Next

The wallet is free during its current early access period. Cobo has indicated it will move to usage-based pricing at general availability. Competitors including Coinbase AgentKit, Ant Group's Anvita Flow, and OKX OnchainOS have all entered the same space in 2026. Coinbase AgentKit uses a Trusted Execution Environment (TEE) architecture, a meaningfully different approach to securing signing authority than Cobo's MPC model. OKX OnchainOS is also TEE-based and supports 50 parallel sub-wallets across nearly 20 chains, optimized for high-frequency trading within the OKX ecosystem rather than the institutional custody model Cobo targets. Ant Group's Anvita Flow, unveiled at the Real Up summit in Cannes on April 2, 2026, also supports the x402 standard, making its micropayment architecture a direct point of comparison with Cobo's. Safe (formerly Gnosis Safe) remains a relevant competitor for teams focused on DAO treasury management.

AI-driven bots now account for approximately 58% of crypto trading volume, according to Coincub data, and McKinsey projects AI agents could intermediate $3 to $5 trillion in global consumer commerce by 2030.

The question now is whether the security architecture across these platforms can keep pace with the volume they are being asked to handle. Cobo enters that contest from a position of regulatory depth: its licenses across five jurisdictions, anchored by its MAS authorisation in Singapore, provide the kind of institutional credibility that counterparties in Asia, the Gulf, and beyond increasingly require before committing to any custody infrastructure at scale.