
Software wallet
Rabby (by DeBank)
2021 · Singaporerabby.io ↗
Also known as Rabby, Rabby Wallet, rabby.io, DeBank wallet
rabby wallet
Rabby is a self-custodial wallet for Ethereum and other EVM chains, built by the team behind the DeBank portfolio tracker and published by OPCODE LABS in Singapore. It runs as a browser extension, desktop app and mobile app, and its main feature is simulating every transaction so you see the balance change and risk warnings before signing.
Our read
Rabby is the wallet for people who already use DeFi and want to see what a transaction does before it happens. Simulation, approval warnings and an MIT-licensed codebase put it ahead of most extensions on the thing that loses people money. Two things to know: it takes a 0.25% fee on in-wallet swaps and bridges, and it is EVM-only, so Solana and Bitcoin need a second wallet.
Key facts
- Latest audits
- SlowMist (extension, 4–15 Aug 2025); Least Authority (extension and mobile, 2 Sep 2025)
- Sep 2025 · CryptoSlate ↗
- Parent funding
- DeBank raised $25M at a $200M valuation in Dec 2021, led by Sequoia China
- Dec 2021 · Plisio ↗
What Rabby wallet is and who is behind it
Rabby comes from DeBank, the Ethereum portfolio tracker founded in 2018 by Tang Hongbo and Xu Yong. DeBank's only announced raise was $25 million at a $200 million valuation in December 2021, led by Sequoia China with Coinbase Ventures, Circle, Crypto.com, Ledger and Dragonfly participating (Plisio). The wallet's GitHub repository dates from April 2021; the extension shipped that year, the iOS app in February 2024. The publisher on the App Store is OPCODE LABS PTE. LTD., Singapore.
Rabby is self-custodial and EVM-only. It detects which chain a dapp wants and switches automatically, which removes the "wrong network" step that trips people up in MetaMask. It shows a combined balance across chains using DeBank's data. It does not support Solana or Bitcoin, and there is no Rabby or DeBank token: the DeBank Chain layer-2 went live in July 2024 without one.
| Platform | Status (September 2026) |
|---|---|
| Chrome and Chromium browsers | v0.94.10, ~900,000 users |
| Desktop app | Windows and macOS |
| iOS | Rabby Wallet – Crypto & EVM, since February 2024 |
| Android | Google Play |
| Hardware signers | Ledger, Trezor and other hardware wallets |
Is Rabby wallet safe?
Rabby's defence is aimed at where wallet users actually lose money: the signature. Before you confirm, it runs the transaction against current chain state and shows the tokens that would leave and arrive, flags contracts and addresses it knows are malicious, and warns on risky token approvals. A drainer that asks you to "claim" an airdrop shows up in Rabby as your whole USDC balance going out.
The code is public under an MIT licence, with only the Rabby name and logo reserved (LICENSE). Two outside audits in 2025 looked at it. SlowMist reviewed the extension from 4 to 15 August 2025 and found three lowest-severity issues. Least Authority's reports of 2 September 2025 found a medium-severity issue in QR-code sync that was left unresolved and an EIP-7702 race condition that was fixed (CryptoSlate).
The one loss on record hit Rabby's swap contract, not the wallet. On 11 October 2022 a flaw let an attacker make Rabby Swap pull tokens that users had approved to it, across 19 chains, for about $200,000. Rabby told users to revoke those approvals and, per Revoke.cash, reimbursed them from its insurance fund (Revoke.cash). If you used Rabby Swap before October 2022, check that the old approval is gone.
Rabby wallet features and what it charges
Holding and sending cost only gas. Rabby earns money when you use its built-in routing: the UI strings in its own repository say it "charges a 0.25% fee" on swaps and bridges, included in the quote, with 0% for wrapping ETH (GitHub). Some stablecoin pairs are promoted at 0%.
| Feature | What it does | Rabby's cut |
|---|---|---|
| Swap | Aggregates DEX aggregators, shows best quote | 0.25% (0% on wraps) |
| Bridge | Routes through third-party bridges | 0.25% |
| GasAccount | Pre-funded balance that pays gas on any supported chain | None beyond gas |
| Gas Top Up | Buys native gas on a chain where you have none | 20% service fee |
| Perps | Hyperliquid perpetuals inside the wallet | 0.02% or 0%, shown per trade |
| Approvals page | Lists and revokes token approvals per chain | Free |
The Gas Top Up fee looks steep, but it is charged on small amounts of gas and Rabby bears the price risk. GasAccount is the cheaper route if you use several L2s.
Incident log
1 entry · $200K lost in total · repaid, confirmed: 0 of 1 where user funds were at stake
Exploit$200K
Rabby Swap contract exploited for about $200,000
A flaw in the Rabby Swap router let an attacker instruct token contracts to send the attacker tokens that users had approved to the router. Losses were about $200,000 across 19 EVM chains; the wallet's key storage was not involved.
Repaid — company's word onlyRevoke.cash's exploit register says Rabby reimbursed affected users from its insurance fund; we did not find an independent on-chain tally of the repayments.
In our ratings
This page is the record. The scores sit on the review cards, next to the evidence and the weights they came from.
Compare Rabby (by DeBank) with
MetaMask (Consensys)Software wallet · 2016 · United StatesSelf-custodial Ethereum wallet built by Consensys since 2016, now also holding Solana and Bitcoin. A 2026 split turns it into a standalone company.
PhantomSoftware wallet · 2021 · United StatesSan Francisco self-custodial wallet that started on Solana in 2021 and now covers Ethereum, Base, Bitcoin and more; valued at $3B in January 2025.
Trust WalletSoftware wallet · 2017Binance-owned self-custodial mobile wallet founded in 2017, claiming over 200M users; its Chrome extension was backdoored in December 2025.
BlueWalletSoftware wallet · 2018MIT-licensed, Bitcoin-only mobile wallet released in 2018, with multisig vaults and hardware-wallet signing; ended its custodial Lightning service in 2023.
Frequently asked questions
Does Rabby wallet support Solana?+
No. Rabby supports Ethereum and EVM chains only. Use a separate Solana wallet, or a multi-chain one, for SOL and SPL tokens.
Who develops Rabby wallet?+
The DeBank team. The published entity is OPCODE LABS PTE. LTD. in Singapore, and the code sits in the RabbyHub organisation on GitHub.
Is Rabby open source?+
Yes. The extension is MIT-licensed on GitHub; the licence only reserves the Rabby name and logo, so forks must rebrand.
Has Rabby wallet been hacked?+
The wallet has not. Its separate swap contract was exploited on 11 October 2022 for about $200,000 in user approvals, and Rabby says it reimbursed affected users.
Is the Rabby wallet extension free?+
Installing, holding and sending are free apart from gas. Swaps and bridges through Rabby carry a 0.25% fee included in the quote.
What changed
- Profile published.
Compiled by
Blockchain Security Researcher · September 27, 2026
We have no commercial relationship with Rabby (by DeBank) and earn nothing from any link on this page. Every fact above carries the date it was true and a link to where it comes from; if one is out of date, the contact page reaches the editor who keeps this file.