# Is Rabby Wallet safe to connect? | TradingAgentStack

> Rabby Wallet: worst case for your money, official links, freeze and key risks, incidents and a 3-step safe setup. Sourced, checked 2026-10-25.

Canonical: https://tradingagentstack.com/check/rabby/

1. [Home](https://tradingagentstack.com/)

2. [Check](https://tradingagentstack.com/check/)

3. Rabby Wallet

# Is Rabby Wallet safe to connect?

Self-custody wallet · Ethereum, EVM networks. Checked 2026-10-25; every line links its source.

**Worst case:** Rabby is self-custody: a fake 'Rabby' add-on or a leaked seed gives an attacker the whole wallet, and a signed malicious approval lets them pull the approved tokens. Nobody can reverse either.

Already lost funds? [What to do if a bot or wallet is drained](https://tradingagentstack.com/trading-bot-drained-what-to-do/).

## Safe setup in 3 steps

1. Install only from rabby.io: Chrome Web Store ID acmacodkjbdgmoleebolmdjonilkdbch, App Store id6474381673, Google Play com.debank.rabbymobile. Rabby has no Firefox add-on, so any 'Rabby' or 'Rabb-Wallet' on Firefox is fake.

2. Read Rabby's pre-sign simulation and risk warnings before every signature, and revoke stale approvals (Rabby has an approvals view, or use Revoke.cash). Rabby never offers support on Telegram, WhatsApp, SMS or WeChat.

3. Use a separate Rabby address with only bot/trading money, and keep long-term holdings on a hardware wallet connected to Rabby.

## What it can do with your money

| Who holds the keys | You hold the keys Self-custody: keys and assets are stored 'locally on their own devices'. Rabby will 'never ask you for your private key or secret recovery phrase'. [source](https://rabby.io/docs/terms-of-use/) |
| --- | --- |
| Can funds be sent out to any address? | Yes. You sign every send yourself, to any address. [source](https://rabby.io/docs/terms-of-use/) |
| Swaps and third parties | Rabby's terms say that swaps and bridging use 'products, or services of one or more third parties'. ethereum.org lists a 0.25% Rabby swap fee (https://ethereum.org/wallets/find-wallet/rabby-wallet/). [source](https://rabby.io/docs/terms-of-use/) |

## Official links

Each link below was confirmed from at least two independent places (the vendor's own pages plus another source). Anything else using this name is not on the list.

- Website: `rabby.io`

- X: `@Rabby_io`

- GitHub: `github.com/RabbyHub`

- GitHub: `github.com/RabbyHub/Rabby`

- App: `https://chromewebstore.google.com/detail/rabby/acmacodkjbdgmoleebolmdjonilkdbch`

- App: `https://apps.apple.com/us/app/rabby-wallet-crypto-evm/id6474381673`

- App: `https://play.google.com/store/apps/details?id=com.debank.rabbymobile`

Where we confirmed these
- https://rabby.io (links Chrome Web Store acmacodkjbdgmoleebolmdjonilkdbch, App Store id6474381673, Google Play com.debank.rabbymobile, x.com/Rabby_io, github.com/RabbyHub and github.com/RabbyHub/Rabby, discord.gg/seFBCWmUre)

- https://chromewebstore.google.com/detail/rabby/acmacodkjbdgmoleebolmdjonilkdbch (website rabby.io, email hi@rabby.io, 'Created by the owner of the listed website', 900,000 users, v0.94.13 updated 2026-10-23)

- https://play.google.com/store/apps/details?id=com.debank.rabbymobile (developer OPCODE LABS PTE. LTD., website rabby.io, 500K+ downloads)

- https://apps.apple.com/us/app/rabby-wallet-crypto-evm/id6474381673 (seller OPCODE LABS PTE. LTD., privacy policy rabby.io/docs/privacy/)

- https://github.com/RabbyHub (org 'Rabby', website rabby.io, X @Rabby_io)

- https://ethereum.org/wallets/find-wallet/rabby-wallet/ (lists rabby.io, x.com/Rabby_io, github.com/RabbyHub/Rabby)

## Incidents

Items marked "reported by users" are claims we could not confirm with the vendor or a security firm.

| Date | What happened | Amount | Outcome | Source |
| --- | --- | --- | --- | --- |
| 2026-08-20 | 'Offside Wallet Theft Factory' (Socket Threat Research): 13 Firefox add-ons ran modified Rabby builds that sent keyring data to attackers before it was encrypted. Others captured seed phrases. Names included 'RABB-Wallet Web3 & EVM', 'Rabb-Wallet CryptoPortfolio' and 'Rabbit For Desktop'. Mozilla signing records show activity from March to August 2026 (third-party report; no extension IDs published in the coverage). (third-party report) |  | losses not reported | [source](https://www.technadu.com/77-firefox-extensions-one-wallet-draining-operation-abusing/633563/) |
| 2025-08-08 | 'GreedyBear' campaign: 150+ malicious Firefox add-ons impersonating Rabby, MetaMask, TronLink and Exodus stole more than $1M (Koi Security, via The Hacker News). (third-party report) | more than $1M | not refunded | [source](https://thehackernews.com/2025/08/greedybear-steals-1m-in-crypto-using.html) |

## Check a link

Got a link, @handle or repo that claims to be Rabby Wallet? Paste it to see if it's on the official list.

Checking links inside Telegram? Send them to [@TASCheckBot](https://t.me/TASCheckBot), or add it to your group so anyone can type `/check`. Alerts on new drains and fakes: [@tradingAgentStk](https://x.com/tradingAgentStk).

## Get an alert for Rabby Wallet

We email you if we add an incident, a freeze report, a known fake or a deadline for Rabby Wallet. Free; unsubscribe anytime.

## More checks: Wallets
[Phantom](https://tradingagentstack.com/check/phantom/)[MetaMask](https://tradingagentstack.com/check/metamask/)[Trust Wallet](https://tradingagentstack.com/check/trust-wallet/)[Exodus](https://tradingagentstack.com/check/exodus/)[Backpack](https://tradingagentstack.com/check/backpack/)[Solflare](https://tradingagentstack.com/check/solflare/)[Coinbase Wallet](https://tradingagentstack.com/check/coinbase-wallet/)[Electrum](https://tradingagentstack.com/check/electrum/)[Keystone](https://tradingagentstack.com/check/keystone/)

Something wrong or out of date? [Send a correction](https://tradingagentstack.com/submit/) with a link to the vendor's docs. Not financial advice. [How we check](https://tradingagentstack.com/check/#method).

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)