When a token is created on Solana with the SPL Token program, the mint account stores the token's core settings: decimals, current supply, and two optional authorities. These two fields are among the most important things to check before you hold a token, because they decide what its creator can still do to it.
The mint authority is the public key allowed to create new units of the token. While it's set, that key can increase supply whenever it likes.
Why it matters: - Dilution: new tokens reduce every holder's share. - Dumping: an attacker can mint a huge amount and sell it into the liquidity pool, draining it.
Mint authority can be revoked by setting it to null. That's permanent: no one can ever mint that token again, and supply is fixed.
When keeping it can be legitimate: tokens with planned issuance, such as staking rewards, governance emissions, or stablecoins minted against deposits. In those cases the authority is often held by a program or multisig with published rules, not by one person's wallet.
The freeze authority can freeze any individual token account for that mint. A frozen account can't send or receive the token until it's thawed.
Why it matters: a malicious creator can let people buy, then freeze their accounts so they can't sell, while the creator's own wallets stay free to sell.
When keeping it can be legitimate: regulated assets. Major fiat stablecoins keep freeze authority so issuers can comply with legal orders. Tokenised real-world assets often keep it for the same reason.
Like mint authority, freeze authority can be revoked by setting it to null.
On an explorer: search the mint address and look at the token's overview. Most explorers show "Mint Authority" and "Freeze Authority", with either an address or "disabled/none".
With RPC: call getAccountInfo on the mint address with {"encoding":"jsonParsed"}. The response includes:
"info": {
"decimals": 6,
"freezeAuthority": null,
"isInitialized": true,
"mintAuthority": null,
"supply": "..."
}
null means revoked. An address means that key still holds the power.
With the CLI: spl-token display <MINT_ADDRESS> prints both authorities.
Tokens created with the newer Token-2022 program can have extensions beyond these two authorities, including: - Transfer fee: a percentage taken on every transfer, sometimes adjustable by an authority - Permanent delegate: an authority that can transfer or burn tokens from any account - Transfer hook: custom program logic that runs on transfers and could block them - Default account state: new accounts may start frozen
A permanent delegate in particular is effectively stronger than freeze authority. If a token uses Token-2022, look at its extensions as well as the two classic authorities.
If an authority isn't revoked, look at who holds it: - A personal wallet: highest risk, since one key controls everything. - A multisig: better, because several parties must sign. - A program (PDA): depends entirely on the program's code and whether it's audited.
| Token type | Mint authority | Freeze authority |
|---|---|---|
| Memecoin / community token | Should be revoked | Should be revoked |
| Governance token with emissions | May be held by a program/DAO | Usually revoked |
| Regulated stablecoin | Held by the issuer | Held by the issuer |
If a new memecoin still has either authority set to a personal wallet, that's one of the clearest red flags on Solana.
MintCheck shows mint authority, freeze authority and other risk signals for any Solana mint address, on the web or via @MintCheckSolBot on Telegram. It reports what's on-chain. Whether to buy is still your call, and nothing here is financial advice.