Rabby
Open-source crypto wallet for Ethereum and EVM chains, available as a browser extension.
Security record: 1 incident · 1 own fault · 1 repaid in full- Self-custodial: keys and wallet data are stored locally on your device
- Browser extension and mobile app; natively supports 80+ EVM networks, no non-EVM chains
- Approvals page to review and bulk revoke token approvals, including EIP-7702
- Built-in safety checks and Scam Tx labels; works with Ledger and other hardware wallets
- Open source and audited regularly by third-party security firms
Six criteria, each 1 to 5 from the facts on this page, weighted into one score inside its category. How we score
- Depth
- 80+ EVM networks; no Solana, Bitcoin or other non-EVM chains
- Cost
- Free wallet; swaps cost 0.25%, 0% on stablecoin and ETH pairs
- Ease
- Extension and mobile app; no account; bulk revoke approvals
- Trust
- Rabby Swap contract was hacked in Oct 2022; Rabby confirmed and fixed it
- Access
- Install and import, no account or KYC
- Install the Rabby extension or mobile app
- Import your wallet with a seed phrase or private key, or connect a Ledger
- Click Approvals on the Rabby home screen
- Select old approvals and sign to revoke them in bulk
Keys live only on your device and Rabby has no access to them, so back up your seed phrase.
1 incident · 1 own fault · 1 repaid in full
Past incidents 1
Rabby Swap router exploited via arbitrary calls. A month after launch, the Rabby Swap router (audited by PeckShield) let anyone pass arbitrary calls, so an attacker pulled tokens from wallets that had approved it on Ethereum and BNB Chain. Rabby told users to revoke approvals and on 13 Oct 2022 offered on-chain negotiation with the hacker. Revoke.cash states Rabby reimbursed affected users from its insurance fund, citing Rabby's X posts; Rabby's own post was not retrieved. https://revoke.cash/exploits/rabby
Own faultUsers lost $190K to $200KRepaid in full
Sources: revoke.cash, theblock.co, halborn.com
From the project’s statements and security coverage. Own fault means the project’s code, servers or keys; third party means a vendor, registrar, oracle or issuer it relies on.
