Rabby is a non-custodial browser extension and mobile wallet for Ethereum and EVM chains, built by the team behind the DeBank portfolio tracker. This review covers what I could install, see and verify on 9 November 2026, and where the evidence stops.
Quick verdict: Rabby is one of the strongest everyday wallets for EVM DeFi, with open-source code, a long public audit trail and pre-sign transaction simulation. The trade-offs are EVM-only support, a built-in swap fee, a seed phrase backup that is easy to postpone, and the fact that any browser wallet remains a hot wallet.
| Item | Detail |
|---|---|
| Best for | Active DeFi users on EVM chains who sign many transactions |
| Fees | Free to install and hold, in-wallet swaps carry a fee reported at 0.25% by third parties, plus network gas |
| Custody | Non-custodial, keys are generated and stored on your device |
| Audits | Public audit reports in the GitHub repo, with SlowMist and Least Authority named on the site |
| Editorial score | 4.3 / 5 |
What I tested, and what I did not
I downloaded the Chrome extension package (version 0.94.15), loaded it into a clean browser profile and created a brand new wallet with a throwaway password. I looked at the welcome and password screens, the wallet’s home screen, and then used the wallet to connect to Pendle as a real dapp. I also opened rabby.io on desktop (1440px), tablet (1024px) and phone (430px), and looked at the GitHub repository, its audits folder and the Chrome Web Store page.
I did not back up the seed phrase, fund the wallet, swap, send, bridge, sign a transaction, use a hardware wallet, or install the mobile app. That means I did not see the transaction simulation or risk warnings working on a live transaction, so what I say about them comes from Rabby’s own site and third-party write-ups. The wallet I made is empty and was used only for this test.
What Rabby actually is
Rabby positions itself as the “go-to wallet for Ethereum and EVM”. The site offers downloads for Chrome, mobile and other browsers, and the headline claim is a wallet that is simple, fast and secure. It only supports EVM chains, so there are no native Bitcoin or Solana accounts, as the SwapSpace review also notes.
The homepage also quotes a series of posts from users that praise it against MetaMask. Those are testimonials selected by Rabby, so I treat them as marketing, not evidence.
Tablet and phone
On tablet the page keeps the hero and shows feature cards for swapping, GasAccount and a “Connect to Dapp” warning screen, which previews the kind of risk flag the wallet shows for suspicious sites.
On phone the hero collapses to a single column with a Download for iOS button, since I was on a device profile that matched iOS.
Setting up the wallet
The extension opens a welcome page with two options, “Create a new address” and “I already have an address”.
Next it asks for a password, used to unlock the wallet and encrypt local data, and for agreement to the Terms of Use and Privacy Policy.
After confirming, Rabby said “New Seed Phrase Created” and “Rabby Wallet is Ready to Use”, showing a shortened address and two buttons, Open Wallet and Backup Seed Phrase.
This is a real design point. You can open a working wallet before you have backed up the seed phrase, and the home screen later shows an orange “Wallet Not Backed Up. Start Backup.” banner. That is convenient for a test and risky for a real user, who might forget. I did not back up this empty test wallet.
The wallet home screen
The popup opens on a compact dashboard with the balance, an Add assets button and a grid of actions: Swap, Send, Bridge, Receive, Transactions, Approvals, Perps, Staking and Mobile Sync. It also showed the ETH price and a gas reading.
The Approvals shortcut sits on the main grid, which makes it easy to review and revoke token permissions. I did not open it.
Connecting to a dapp
I opened Pendle and clicked Connect Wallet. The list showed WalletConnect, Rabby Wallet with an “installed” label, My Wallet and All Wallets, so Pendle detected Rabby as its own option.
That is not guaranteed everywhere. Rabby’s GitHub README explains that many dapps label any injected wallet as “MetaMask”, and asks developers to show both brands so users are not confused.
Choosing Rabby opened an extension window titled “Connect to Dapp”. It showed the site address, which listings include the site, a “Site popularity” rating of High, a “My mark” field and the address being connected.
After I approved, Pendle’s header showed my shortened address.
I only tested a connection, not a signature or a transaction.
Fees and costs
There is no charge to install Rabby or hold assets. In-wallet swaps are the main revenue source. SwapSpace reports a 0.25% fee that is included in the quote, and in its own test, swapping about $107 of ETH to USDT cost 0.336% including gas. I did not run a swap, so I cannot confirm that figure. The wallet also showed a promotion for 0% swap fees on certain stablecoin pairs, which suggests the rate varies by pair. You pay network gas on every transaction.
Security and audits
The Rabby GitHub repository is public, and its audits folder contains year folders from 2021 to 2026. The site says it is open source on GitHub and lists SlowMist and Least Authority as auditors, and both have published material on the wallet. SwapSpace says it read fourteen audit reports and that the extension and the mobile app are different products with different audit histories. I opened the audits folder, but I did not read the individual reports. Audits folder in the repo, with reports organized by year.
The Chrome Web Store page showed 4.5 stars, about 2.9K ratings and 800,000 users. In my session the page also displayed a banner saying “Item currently unavailable” with a disabled Add to Chrome button. I do not know the reason, and I installed from the package instead, so I would not read anything into it, but check the official link on rabby.io before you install.
Rabby’s main safety feature is that it simulates a transaction before you sign it and warns about risky contracts and flagged dapps. A user on X quoted on the homepage says it saved them from a malicious transaction, and a third-party article describes the balance-change preview. Both are secondhand to me.
Community views
In an r/ethereum thread asking if Rabby is safe, a commenter says they replaced MetaMask with it and are happy, while another points out that no browser extension is safe enough for your main private keys, and recommends pairing MetaMask or Rabby with a hardware wallet. A r/CryptoCurrency thread on switching from MetaMask praises the Ledger integration and the DeBank-powered token detection. Both threads are about three years old, so I read them for sentiment only.
Who should use Rabby
Good fit:
- DeFi users who sign many transactions and want more context before each one
- People who use a hardware wallet and want a better interface for it
- Users who like open-source code and public audit reports
Think twice:
- Anyone who needs Bitcoin, Solana or other non-EVM chains in the same wallet
- Beginners who might skip the seed phrase backup
- Users who want to hold large balances in a hot wallet without a hardware device
FAQ
Is Rabby safe?
It is open source and has public audits, but it is still a browser wallet. Back up your seed phrase offline and consider using a hardware wallet for large balances.
Does Rabby charge fees?
There is no cost to install or hold assets. In-wallet swaps carry a fee reported at 0.25%, plus network gas.
Does Rabby support Solana or Bitcoin?
No. It supports Ethereum and EVM chains.
Do I have to back up my seed phrase right away?
No, the wallet opens before you do, and shows a reminder banner afterward. Back it up before you add funds.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.
