What Is Rabby Wallet? Operator, Security Checks, Fees and Audits

Who makes Rabby

Rabby began as a DeBank project. DeBank, previously known mainly as a DeFi data dashboard, introduced Rabby as a browser extension wallet in July 2021, according to The Defiant. The connection still shows in official materials: an independent audit report from Least Authority, dated December 2024 and stored in Rabby's own GitHub repository, is titled "DeBank Rabby Wallet Extension," and the Chrome Web Store listing links to DeBank's privacy policy.

The legal operator named in Rabby's Terms of Service (last updated December 9, 2025) is OPCODE LABS PTE. LTD., which uses a Singapore address. The same entity is listed as the developer of the iOS app, whose copyright line names DeBank Global PTE. LTD. For US users the terms apply Texas law; for everyone else they apply Singapore law, with arbitration seated in Singapore. Rabby has not published a separate corporate history, founder list or headcount, so this profile does not state them.

The code is public in the RabbyHub organization on GitHub under the MIT License. The license text reserves the Rabby name and logo, so forks may not reuse the brand.

What Rabby does differently: checks before you sign

Most wallet losses in DeFi happen at the signing step: a user approves a contract or signs a message without understanding it. Rabby's design centers on that moment.

• Balance-change preview. Before you confirm, Rabby simulates the transaction and shows which tokens will leave and enter your wallet. If a "claim" transaction would actually send your tokens away, the preview should show it.
• Pre-transaction risk scanning. The Chrome Web Store listing describes automatic scanning of each transaction for potential risks before it is signed, shown alongside the preview.
• Automatic network switching. Rabby switches to the chain a connected app needs, which avoids manual network changes, one of the features DeBank highlighted at launch.

These checks reduce, but do not remove, signing risk. A simulation reflects the chain's state at that moment and the data Rabby has about addresses; a new scam contract may not be flagged yet, and a signed message that is not a transaction can still be abused later. Reading what you sign remains the user's job. OBOL's seed phrase security guide covers the other half of wallet safety.

Supported networks and devices

Rabby describes itself as a wallet for Ethereum and EVM chains. As of October 2026, its official listings do not mention Solana, Bitcoin or other non-EVM networks, so assets on those chains need a different wallet.

Rabby runs as:

• a browser extension, published on the Chrome Web Store (version 0.94.12, updated October 15, 2026);
• an iOS app (developer listed as OPCODE LABS PTE. LTD.);
• an Android app, which Rabby's team said in 2024 was published under the developer name DeBank.

Rabby can also act as an interface for keys held elsewhere. Its public source code includes connectors for Ledger, Trezor, OneKey, Keystone, GridPlus Lattice, BitBox02 and imKey hardware wallets, plus Safe multisig accounts and Cobo Argus. With a hardware wallet connected, keys stay on the device and Rabby passes transactions to it for approval. See the hardware wallet setup guide for how that split works.

Fees

Rabby is free to download. Costs arise only when you use its built-in swap or bridge features, plus the usual network gas.

The swap fee logic is visible in Rabby's open-source code (version 0.94.12, checked October 2026):

Bridges use the same size-based discounts at $100,000 and $1,000,000. Any fee charged by the underlying DEX aggregator or bridge comes on top, and the Terms of Service confirm that quoted rates are estimates that can change. The in-app quote is the figure to rely on. Rabby also offers a "Gas Account" that can be topped up, and the iOS listing shows these top-ups as in-app purchases.

Audits and incident history

Rabby stores its audit reports in the `audits` folder of its GitHub repository. As of October 2026 the folder contains:

These reports cover the extension at specific versions. An audit is a point-in-time review, not a guarantee for later releases or for the mobile apps.

October 2022 swap exploit. On October 11, 2022, less than a month after Rabby Swap launched, The Block reported that the smart contract behind the swap feature had been exploited and users' wallets drained through existing token approvals. Rabby told users who had used Swap to revoke all approvals across chains; users who had not used Swap were not affected. The full loss amount was not established in that report.

Fake apps. Counterfeit "Rabby Wallet" apps have repeatedly appeared in Apple's App Store. In February 2024, Forklog reported victims who imported their recovery phrases into one of them and lost funds, including one report of more than $100,000. Search results also contain many unofficial pages offering "Rabby downloads."

Downloading the real Rabby

The safest route is to start from rabby.io and follow its links to the browser store or app store, then confirm the publisher before installing. As of October 2026, the Chrome Web Store listing points to rabby.io as the developer website, and the iOS app lists OPCODE LABS PTE. LTD. as developer. Rabby's terms state that the company will never ask for your private key or recovery phrase. Any site, support agent or "validation" form that requests one is a scam; if you have already entered it, follow the steps in what to do in the first hour after a wallet compromise.

Getting help

Rabby's Terms of Service list [email protected] as the support contact, and the Chrome Web Store listing gives [email protected]. Support can help with app behavior but cannot recover funds or keys, because Rabby never holds them.

For an editorial assessment, see OBOL's Rabby Wallet review, or browse the wallet ratings for alternatives.

Official channels

• Website: rabby.io
• X: x.com/Rabby_io
• GitHub: github.com/RabbyHub
• Chrome Web Store: chromewebstore.google.com/detail/rabby-wallet/acmacodkjbdgmoleebolmdjonilkdbch
• iOS App Store: apps.apple.com/app/id6474381673
• Support email: [email protected]