Mint authority and freeze authority on Solana, explained

Mint authority is the address allowed to create new supply of a token. Freeze authority is the address allowed to freeze individual holders' token accounts. If mint authority is not revoked, someone can print more tokens at will. If freeze authority is not revoked, someone can stop you transferring. Both are single fields you can read in under a minute.

They are also the two most over-interpreted fields in Solana trading. Revoked authorities are the price of entry, not a safety rating, and a token can pass both checks and still be built to take your money.

What mint authority can do

On Solana, a token is a mint account owned by the SPL Token program or its successor, Token-2022. That account stores the supply, the decimals, and two optional addresses. The first is the mint authority.

Whoever holds it can call the mint instruction and increase supply, to any amount, at any time, with no ceiling and no notice. There is no cap in the token standard itself — a "1 billion fixed supply" memecoin with a live mint authority has a fixed supply only in the sense that nobody has changed it yet.

The attack needs no sophistication: mint a large tranche, sell it into the existing pool, and every prior holder absorbs the dilution. Locked liquidity makes this easier rather than harder, because the pool is guaranteed to be there to sell into — an interaction covered in what a liquidity lock protects you from and what it does not.

Revoking is one-way. The authority is set to null, and the token program provides no mechanism to reinstate it on the same mint account.

What freeze authority can do

The second optional address is the freeze authority, and it operates on individual token accounts rather than on supply.

Whoever holds it can freeze any account holding that token. A frozen account cannot transfer or sell until the same authority thaws it. It is targeted — one wallet, a hundred, or every wallet except a chosen set.

That makes freeze authority the cleanest honeypot mechanism on Solana. It needs no unusual contract and nothing that looks strange in a code scan, because the code is the standard token program every Solana token uses. The token behaves normally until the moment it doesn't, for you specifically. How honeypot tokens work and where detection fails covers the other variants.

There are legitimate uses: regulated stablecoins and compliance-bound assets retain freeze authority deliberately, to freeze sanctioned addresses. On a memecoin, that justification does not exist.

How to check both on Solscan

Copy the mint address — from the launchpad's token page or the pool itself, never from a chat message — and open it on solscan.io.

On the token's page, the overview panel lists the mint's core fields, including Mint Authority and Freeze Authority alongside supply and decimals. A revoked authority shows as empty, null or an em dash depending on the interface version. A live authority shows a clickable address — open it. A wallet is a person. A program-derived address belonging to the launchpad is usually migration machinery rather than a discretionary human, which is a different risk.

Two other fields on the same page are worth two seconds each. Which program owns the mint — SPL Token or Token-2022 — determines whether the extension risks below apply. And the update authority on the token's Metaplex metadata controls the name, symbol and image: it cannot touch your balance, but it can rename a token into an impersonation of something else after you buy.

If you would rather not trust a web interface, both fields come back from an RPC getAccountInfo call with jsonParsed encoding, as mintAuthority and freezeAuthority — null when revoked — or from spl-token display <MINT_ADDRESS>.

How to check both on RugCheck

RugCheck is the standard first pass in the Solana workflow and it reads the same fields, plus context you would otherwise assemble by hand.

Paste the mint address into the search field and read the risk list on the report. Mint and freeze authority appear as discrete entries — flagged when still enabled, marked as disabled or absent when revoked. Alongside them you get liquidity-pool status, LP lock or burn state, and holder concentration, which is the point of using it rather than reading the mint account directly.

Two caveats apply to any scanner. The wording and layout of risk items change as the tool is updated, so match on meaning rather than on a string. And the overall score is a weighted opinion, not a measurement — the individual line items are the useful part. Meme Central runs RugCheck on Solana tokens and GoPlus on EVM tokens and surfaces both on the relevant token page for exactly that reason: fast elimination of mechanical traps, not a verdict.

Token-2022 changes the question

If the mint is owned by Token-2022 rather than the original SPL Token program, the two-field check is no longer sufficient, and this is the part most guides have not caught up with.

Token-2022 supports extensions that attach behaviour to the mint itself. A transfer fee applies a percentage cut to every transfer, with the rate adjustable by a fee config authority — the Solana equivalent of a mutable sell tax. A transfer hook runs external program code on every transfer and can make transfers fail conditionally. A permanent delegate can move tokens out of any holder's account. A non-transferable flag makes the token soulbound, and a default account state of frozen means new holders start frozen.

Any one of those reproduces the effect of a live freeze authority while both authority fields read as revoked. Solscan lists extensions on the mint's page and RugCheck flags several. If Token-2022 is the owning program, read the extension list before accepting a clean authority check.

Why revoked is a floor, not a pass

Revoking both authorities costs a creator two transactions and a fraction of a cent, and most launchpads do it automatically at deployment. The signal value of seeing it done is therefore close to zero — you learn that the creator did the default thing.

What it does not tell you: how much supply the creator holds and whether they intend to sell it; whether liquidity is locked, burned or sitting in a wallet; whether the top wallets were funded from one address in the same block; or whether the deployer has a trail of abandoned launches behind them. None of that is affected by the state of the mint account.

The expensive misreading is treating "mint and freeze revoked" as a green light. It is a precondition. A token that fails it should be discarded immediately; a token that passes has cleared the lowest bar available and still needs its holder distribution read properly and the rest of the rug-pull workflow run against it.

What these checks do not catch

The authority fields describe supply and transferability. They say nothing about the pool, and a token with both revoked can still have liquidity that the creator withdraws an hour after you buy.

They say nothing about distribution: a creator holding 30% of a fixed, un-mintable supply needs no mint authority to destroy the price.

They are also a snapshot. Authorities can be revoked after launch, so an hour-old report may not describe the current state — and while a revoked mint authority cannot be restored on the same mint, nothing prevents the same team deploying a fresh one.

None of this transfers to other chains. Mint and freeze authority are Solana token-program concepts with no equivalent on Base, BNB Chain or Robinhood Chain, where the analogous risks live in Solidity as owner-callable mint functions, uncapped tax setters and blacklists. What changes when you move between Solana and EVM chains sets out the differences.

Frequently asked questions

What does "mint authority not revoked" mean?

It means the address listed as the token's mint authority can still create new supply, in any quantity, at any time. On a memecoin claiming a fixed supply, that claim is unenforced. The usual attack is to mint a tranche and sell it into the existing pool, diluting every holder.

Is freeze authority always a scam signal?

On a memecoin, effectively yes — there is no legitimate reason for one. On regulated stablecoins and compliance-bound tokenised assets it is deliberate and necessary, because the issuer must be able to freeze sanctioned addresses. Judge it by what the token claims to be.

How do I check mint authority on Solana?

Open the mint address on Solscan and read the Mint Authority and Freeze Authority fields in the token overview, or paste the address into RugCheck and read the risk list. For a direct check, an RPC getAccountInfo call with jsonParsed returns both fields as null when revoked.

Does revoking authorities make a token safe?

No. It removes two specific attacks and nothing else. Liquidity can still be pulled, the creator can still sell their allocation, the top wallets can still be one person, and the token can still go to zero — which is what usually happens regardless of how the mint account is configured.

---

The other field buyers check, and what it does not cover

Revoking authorities is the cheap half of proving intent; the pool is the expensive half. If you are launching, Team Finance — built by TrustSwap, which also builds Meme Central — locks LP tokens for a fixed term across Ethereum, Robinhood Chain, Polygon, Base and BNB, and the lock appears as a verified badge on your token's page in the Meme Central feed. It does not revoke anything for you, it does not stop you selling your own allocation, and it ends when the term ends. How to revoke mint and freeze authority on Solana covers the other half.

---

Nothing here is financial, legal or tax advice. Memecoins are extremely high-risk: most lose most of their value, and the majority of tokens launched never reach a decentralised exchange at all. Never spend money you cannot afford to lose entirely. Meme Central does not recommend any specific token. Data described as Meme Central's own reflects tokens indexed by Meme Central and is not whole-market data.