Rabby

Rabby is a crypto wallet for Ethereum and EVM-compatible networks such as Arbitrum, Base, BNB Chain and Polygon. It started as a browser extension in 2021, the year its GitHub repository was created, and now also has iOS and Android apps. Its pitch is safety when using apps: before you sign anything, it simulates the transaction and shows what will leave and enter your wallet.

Rabby is built by the team behind DeBank, the on-chain portfolio tracker. The site's own page title reads "Debank & Rabby", the Android app is published under the ID com.debank.rabbymobile, bug reports go to a debank.com address, and a 2024 Least Authority audit is titled "DeBank Rabby Wallet Extension". The legal operator named in Rabby's terms of service, dated December 9, 2025, is OPCODE LABS PTE. LTD. Rabby does not publish how that company relates to DeBank, who owns it, where it is based or who leads it.

Rabby is self-custodial. Keys are created and stored on your device, and Rabby's help center says it stores no data about your wallet and ties no email or personal identifier to it. You can create a new seed phrase, import one from another wallet, or connect a hardware wallet so keys never touch the computer.

The features that set it apart all happen before signing. On the 80-plus networks it natively integrates, Rabby simulates each transaction and previews balance changes, runs a security engine that warns about risky contracts and addresses, alerts you to dangerous token approvals you have already granted, and lets you revoke several at once. It also switches networks automatically to match the app you are using. Our guide to token approvals explains why the approval tools matter: most wallet drains come from a signature the user did not understand.

Other EVM networks and testnets can be added as custom networks with fewer features. Non-EVM chains are not supported at all: Rabby's help center says Bitcoin, Solana and Tron addresses cannot be used, and a Rabby address is not a valid recipient on those networks. For how this EVM-only design compares with multi-chain wallets, see how Rabby compares with other software wallets.

• Hardware wallets in the extension: Ledger, Trezor, GridPlus, OneKey, Keystone, NGRAVE ZERO, BitBox02, CoolWallet, AirGap Vault, imToken and imKey.
• Hardware wallets in the mobile app: Ledger and Trezor over Bluetooth, Keystone and OneKey.

Using Rabby to hold, send and connect to apps costs nothing beyond network gas. Rabby earns from its built-in trading features. It announced a 0.25% fee on in-app swaps in July 2024, and its help center lists the pairs where that fee is waived: swaps between two stablecoins (such as USDC, USDT, DAI, USDS or USDe) or between ETH and ETH-based tokens (such as WETH, stETH or wstETH), when both are on the same chain. Swaps and bridges are quoted from outside aggregators, so the price you see also includes their spreads and any bridge fees.

The perps feature routes orders to Hyperliquid, which sets its own volume-based trading fees. Compared with a dedicated aggregator, a 0.25% swap fee can still be cheap or expensive depending on the route; our article on the cheapest way to swap crypto shows how to compare.

Rabby publishes its audit reports in its GitHub repository rather than just naming the firms. As of October 2026 the folder holds SlowMist reports dated March 2022, July 2023, December 2024, August 2025 and August 2026, and Least Authority reports dated December 2024, September 2025 and October 2026, all for the browser extension. Audits cover the code at a point in time; they do not guarantee later versions.

The extension and mobile app code are public on GitHub under the MIT licence, with one addition: the Rabby name and logo may not be reused in republished software. The extension is updated often; version 0.94.13 shipped on October 23, 2026.

Rabby's one major incident hit its swap feature, not the wallet's key storage. On October 11, 2022, about a month after Rabby Swap launched, an attacker exploited a flaw in the swap router contract to move tokens from users who had approved it. PeckShield had audited that contract. Rabby told everyone who had used Swap to revoke approvals on every chain and said other wallets were unaffected. Web3 Is Going Great tracked about 114 ETH and 179 BNB moved through Tornado Cash, roughly $195,000 at the time, while The Block reported the full extent was unknown. We found no confirmed record of whether affected users were reimbursed.

Install Rabby only from links on rabby.io, which point to the Chrome Web Store, the App Store and Google Play. Fake wallet extensions are a common phishing route, and a lookalike may ask for your seed phrase on first run. Rabby's help center has a migration guide for MetaMask users; the usual path is to import the existing seed phrase or connect the same hardware wallet. Rabby can be installed alongside MetaMask, so you can move funds over gradually.

Leaving is as simple as arriving, because Rabby uses standard EVM seed phrases and private keys: import them into another EVM wallet or send funds out. Before you go, revoke approvals you no longer need from the same screen Rabby provides.

Rabby's primary support channel is the chat widget on its help center at support.rabby.io, with email at [email protected] as a fallback. Its Discord is for community discussion; staff there will route bug reports back to the help-center chat. Rabby says it will never ask for a seed phrase or private key, and that Discord admins never send the first direct message or a friend request. Anyone who does is impersonating the team.

Rabby's history is a steady expansion from one extension to a multi-platform wallet.

• April 2021: Rabby extension repository created on GitHub.
• March 2022: first SlowMist audit of the extension.
• October 11, 2022: Rabby Swap router exploited, about a month after the feature launched.
• July 2024: 0.25% swap fee introduced across extension, desktop and mobile.
• December 2024: first Least Authority audit.
• 2026: new SlowMist (August) and Least Authority (October) audits; the help center lists perpetuals trading through Hyperliquid.