Ratty Bot 2021 Review

Many 2021 Ratty variants included a wiper mode. If the victim tried to remove the bot or change passwords too late, the bot would:


Discord’s Trust & Safety team confirmed in a late-2021 transparency report that token theft attempts increased 600% year-over-year, with Ratty variants responsible for ~40% of those cases. ratty bot 2021


2.1 Authorship Analysis of the compiled code suggests the bot was not the product of a major financial institution but likely the work of a sophisticated independent developer or a "gray hat" collective. The code structure utilizes a modified version of the Krypton open-source framework, heavily altered to bypass standard API rate limits. Many 2021 Ratty variants included a wiper mode

2.2 Deployment The bot was deployed on January 14, 2021. Early traces show it operating on mid-tier exchanges (e.g., Exmo, HitBTC) before expanding to decentralized exchanges (DEXs) on the Binance Smart Chain and Ethereum networks. Discord’s Trust & Safety team confirmed in a


The most significant event attributed to Ratty Bot 2021 occurred on May 19, 2021, coinciding with the broader crypto market crash.