Rabby Wallet: keys, security, fees and reviews
In short
- Key control
- Self-custodial: only the user holds the private keys; assets stay on the blockchain and Rabby never has access to funds.
- Fees
- Swaps: 0.25% service fee included in each swap quote; waived for same-chain stablecoin-to-stablecoin and ETH-to-ETH-derivative pairs (as of 31 October 2026).
- Risks and caveats
- Rabby never asks for a private key or recovery phrase; anyone who obtains them controls the funds.
- Checked
- 31 October 2026
Visitor ratings: do you like Rabby Wallet?
Key facts
- Official site
- rabby.io
Key facts checked on 31 October 2026 against official sources.
What is Rabby Wallet
Rabby Wallet is a self-custodial wallet for Ethereum and EVM networks, available as a browser extension (Chrome, Brave, Edge), a desktop app and a mobile app. It is developed by the DeBank team and operated by OPCODE LABS PTE. LTD.; its code has been public on GitHub since 2021.
Who holds the keys
| Parameter | Details |
|---|---|
| Key control | Self-custodial: only the user holds the private keys; assets stay on the blockchain and Rabby never has access to funds. |
| Key storage | Wallet data is stored locally on the device, with no email or personal identifier tied to the account. |
| Seed phrase | Seed phrases and private keys created or imported in Rabby can be backed up from the address settings; hardware-wallet seeds stay on the device. |
Features and supported networks
| Parameter | Details |
|---|---|
| Platforms | Browser extension for Chrome, Brave and Edge; mobile app for iOS and Android; desktop app for macOS and Windows. |
| Supported networks | All EVM-compatible networks, with 80+ natively integrated; Bitcoin, Solana and Tron are not supported. |
| Hardware wallet support | Extension: Ledger, Trezor, GridPlus, OneKey, Keystone, NGRAVE ZERO, BitBox02, CoolWallet, AirGap Vault, imToken, imKey. |
| Swaps | Built-in swap and bridge that fetch quotes from aggregators. |
| Transaction simulation | Simulates each transaction and shows balance changes and risk warnings before signing. |
| Approvals | Approval revoking on integrated networks. |
Security and audits
- Extension source code is public on GitHub (RabbyHub/Rabby) under the MIT licence, with the Rabby brand name and logo reserved; the mobile app code is also public.
- Audit reports are published in the GitHub repository: a penetration test (June 2021), SlowMist audits (March 2022, July 2023, December 2024, August 2025, August 2026) and Least Authority audits (December 2024, September 2025, October 2026).
- The October 2026 Least Authority report lists two issues, including perps agent keys remaining in memory after wallet lock, and two suggestions.
- Bug reports go to bugbounty@debank.com.
Fees
| Parameter | Details |
|---|---|
| Swaps | 0.25% service fee included in each swap quote; waived for same-chain stablecoin-to-stablecoin and ETH-to-ETH-derivative pairs (as of 31 October 2026). |
| Fee-free pairs | No Rabby fee for swaps between tokens of the same group on the same chain. |
History
| Date | Event |
|---|---|
| 2021 | Rabby extension code published on GitHub. |
| 23 June 2021 | First penetration testing report of the Chrome extension. |
| 18 March 2022 | First SlowMist audit of the browser extension. |
| 12 December 2024 | First Least Authority audit of the extension. |
| 9 October 2026 | Latest Least Authority final audit report of the extension. |
Risks and caveats
- Rabby never asks for a private key or recovery phrase; anyone who obtains them controls the funds.
- Only EVM networks are supported; Bitcoin, Solana or Tron sent to a Rabby address will not arrive.
- Swap rates are estimates; trades that ignore high price-impact warnings can lose substantial value.
About the developer
- Legal entity
- OPCODE LABS PTE. LTD. (Singapore law applies outside the United States).
- Developer
- DeBank team; the terms page is titled "Debank & Rabby" and bug reports go to a debank.com address.
- Founded
- 2021
Official links
- Website: rabby.io
- Source code: github.com/RabbyHub/Rabby
- Security: github.com/RabbyHub/Rabby/tree/develop/audits
- Support: support.rabby.io
- Docs: rabby.io/docs/integrating-rabby-wallet
Questions and answers
Is Rabby self-custodial?
Yes. Only the user holds the private keys, which are stored locally on the device; Rabby has no access to funds.
Is Rabby open source?
Yes. The extension code is on GitHub under the MIT licence (brand and logo reserved), and the mobile app code is public too.
Has Rabby been audited?
Yes. SlowMist and Least Authority audit it regularly; the latest reports are from August and October 2026.
Which networks does Rabby support?
All EVM-compatible networks, with 80+ integrated natively. Bitcoin, Solana and Tron are not supported.
Does Rabby charge fees?
The wallet is free; swaps include a 0.25% service fee, waived for some same-chain stablecoin and ETH pairs (as of 31 October 2026).
Sources
- Rabby — Home
- Rabby — Terms of Service
- Rabby Help — What is Rabby Wallet?
- Rabby Help — How secure is Rabby Wallet?
- Rabby Help — Supported networks & tokens
- Rabby Help — Supported hardware wallets
- Rabby Help — How to use Rabby Swap
- Rabby Help — 0% swap fee token pairs
- Rabby Help — How to back up seed phrase or private key
- GitHub — RabbyHub/Rabby LICENSE
- GitHub — RabbyHub/Rabby audits
- SlowMist — Rabby Browser Extension Wallet audit report (August 2026)
- Least Authority — Rabby Wallet Extension final audit report (October 2026)
More in this section
How voting works
Votes are anonymous and carry no text. Each device has one vote per item; press the same button again to remove it. Cloudflare Turnstile checks that a person is voting. We keep a random device ID in a cookie and a salted hash of the IP address to limit abuse — no names, no accounts. Votes are visitors’ opinions, not investment advice.
Page updated: