[Wallets](https://revain.org/wallets/) › Rabby Wallet

# Rabby Wallet: keys, security, fees and reviews

## In short

- **Key control**: Self-custodial: only the user holds the private keys; assets stay on the blockchain and Rabby never has access to funds.
- **Fees**: Swaps: 0.25% service fee included in each swap quote; waived for same-chain stablecoin-to-stablecoin and ETH-to-ETH-derivative pairs (as of 31 October 2026).
- **Risks and caveats**: Rabby never asks for a private key or recovery phrase; anyone who obtains them controls the funds.
- **Checked**: 31 October 2026

## Key facts

- **Official site**: [rabby.io](https://rabby.io/)

Key facts checked on 31 October 2026 against official sources.

## What is Rabby Wallet

Rabby Wallet is a self-custodial wallet for Ethereum and EVM networks, available as a browser extension (Chrome, Brave, Edge), a desktop app and a mobile app. It is developed by the DeBank team and operated by OPCODE LABS PTE. LTD.; its code has been public on GitHub since 2021.

## Who holds the keys

| Parameter | Details |
|---|---|
| Key control | Self-custodial: only the user holds the private keys; assets stay on the blockchain and Rabby never has access to funds. |
| Key storage | Wallet data is stored locally on the device, with no email or personal identifier tied to the account. |
| Seed phrase | Seed phrases and private keys created or imported in Rabby can be backed up from the address settings; hardware-wallet seeds stay on the device. |

## Features and supported networks

| Parameter | Details |
|---|---|
| Platforms | Browser extension for Chrome, Brave and Edge; mobile app for iOS and Android; desktop app for macOS and Windows. |
| Supported networks | All EVM-compatible networks, with 80+ natively integrated; Bitcoin, Solana and Tron are not supported. |
| Hardware wallet support | Extension: Ledger, Trezor, GridPlus, OneKey, Keystone, NGRAVE ZERO, BitBox02, CoolWallet, AirGap Vault, imToken, imKey. |
| Swaps | Built-in swap and bridge that fetch quotes from aggregators. |
| Transaction simulation | Simulates each transaction and shows balance changes and risk warnings before signing. |
| Approvals | Approval revoking on integrated networks. |

## Security and audits

- Extension source code is public on GitHub (RabbyHub/Rabby) under the MIT licence, with the Rabby brand name and logo reserved; the mobile app code is also public.
- Audit reports are published in the GitHub repository: a penetration test (June 2021), SlowMist audits (March 2022, July 2023, December 2024, August 2025, August 2026) and Least Authority audits (December 2024, September 2025, October 2026).
- The October 2026 Least Authority report lists two issues, including perps agent keys remaining in memory after wallet lock, and two suggestions.
- Bug reports go to bugbounty@debank.com.

## Fees

| Parameter | Details |
|---|---|
| Swaps | 0.25% service fee included in each swap quote; waived for same-chain stablecoin-to-stablecoin and ETH-to-ETH-derivative pairs (as of 31 October 2026). |
| Fee-free pairs | No Rabby fee for swaps between tokens of the same group on the same chain. |

## History

| Date | Event |
|---|---|
| 2021 | Rabby extension code published on GitHub. |
| 23 June 2021 | First penetration testing report of the Chrome extension. |
| 18 March 2022 | First SlowMist audit of the browser extension. |
| 12 December 2024 | First Least Authority audit of the extension. |
| 9 October 2026 | Latest Least Authority final audit report of the extension. |

## Risks and caveats

- Rabby never asks for a private key or recovery phrase; anyone who obtains them controls the funds.
- Only EVM networks are supported; Bitcoin, Solana or Tron sent to a Rabby address will not arrive.
- Swap rates are estimates; trades that ignore high price-impact warnings can lose substantial value.

## About the developer

- **Legal entity**: OPCODE LABS PTE. LTD. (Singapore law applies outside the United States).
- **Developer**: DeBank team; the terms page is titled "Debank & Rabby" and bug reports go to a debank.com address.
- **Founded**: 2021

## Official links

- Website: [rabby.io](https://rabby.io/)
- Source code: [github.com/RabbyHub/Rabby](https://github.com/RabbyHub/Rabby)
- Security: [github.com/RabbyHub/Rabby/tree/develop/audits](https://github.com/RabbyHub/Rabby/tree/develop/audits)
- Support: [support.rabby.io](https://support.rabby.io/)
- Docs: [rabby.io/docs/integrating-rabby-wallet](https://rabby.io/docs/integrating-rabby-wallet/)

## Questions and answers

**Is Rabby self-custodial?**

Yes. Only the user holds the private keys, which are stored locally on the device; Rabby has no access to funds.

**Is Rabby open source?**

Yes. The extension code is on GitHub under the MIT licence (brand and logo reserved), and the mobile app code is public too.

**Has Rabby been audited?**

Yes. SlowMist and Least Authority audit it regularly; the latest reports are from August and October 2026.

**Which networks does Rabby support?**

All EVM-compatible networks, with 80+ integrated natively. Bitcoin, Solana and Tron are not supported.

**Does Rabby charge fees?**

The wallet is free; swaps include a 0.25% service fee, waived for some same-chain stablecoin and ETH pairs (as of 31 October 2026).

## Sources

- [Rabby — Home](https://rabby.io/)
- [Rabby — Terms of Service](https://rabby.io/docs/terms-of-use/)
- [Rabby Help — What is Rabby Wallet?](https://support.rabby.io/en/articles/14120079-what-is-rabby-wallet)
- [Rabby Help — How secure is Rabby Wallet?](https://support.rabby.io/en/articles/14150618-how-secure-is-rabby-wallet)
- [Rabby Help — Supported networks & tokens](https://support.rabby.io/en/articles/14120342-supported-networks-tokens)
- [Rabby Help — Supported hardware wallets](https://support.rabby.io/en/articles/14120665-supported-hardware-wallets)
- [Rabby Help — How to use Rabby Swap](https://support.rabby.io/en/articles/14134156-how-to-use-rabby-swap)
- [Rabby Help — 0% swap fee token pairs](https://support.rabby.io/en/articles/15956135-0-swap-fee-token-pairs)
- [Rabby Help — How to back up seed phrase or private key](https://support.rabby.io/en/articles/14150621-how-to-back-up-seed-phrase-or-private-key)
- [GitHub — RabbyHub/Rabby LICENSE](https://github.com/RabbyHub/Rabby/blob/develop/LICENSE)
- [GitHub — RabbyHub/Rabby audits](https://github.com/RabbyHub/Rabby/tree/develop/audits)
- [SlowMist — Rabby Browser Extension Wallet audit report (August 2026)](https://github.com/RabbyHub/Rabby/blob/develop/audits/2026/%5B20260824%5DRabby_Browser_Extension_Wallet_SlowMist_Audit_Report.pdf)
- [Least Authority — Rabby Wallet Extension final audit report (October 2026)](https://github.com/RabbyHub/Rabby/blob/develop/audits/2026/%5B20261009%5DLeast%20Authority%20-%20Rabby%20Wallet%20Extension%20Final%20Audit%20Report.pdf)

## More in this section

- [BitGo](https://revain.org/wallets/bitgo/)
- [OKX Wallet](https://revain.org/wallets/okx-wallet/)
- [Phantom](https://revain.org/wallets/phantom/)
- [SafePal](https://revain.org/wallets/safepal/)
- [Tangem](https://revain.org/wallets/tangem/)
- [Bitget Wallet](https://revain.org/wallets/bitget-wallet/)
- [All Wallets →](https://revain.org/wallets/)

## How voting works

Votes are anonymous and carry no text. Each device has one vote per item; press the same button again to remove it. Cloudflare Turnstile checks that a person is voting. We keep a random device ID in a cookie and a salted hash of the IP address to limit abuse — no names, no accounts. Votes are visitors’ opinions, not investment advice.

Page updated: 2026-10-31

---
Source: https://revain.org/wallets/rabby/