Mint and freeze authority on Solana, explained
Every Solana token has a few switches that decide who can still change it after launch. Two of them, mint authority and freeze authority, are behind a large share of rug pulls. Here is what each one does, when it is normal, and how to check any token with a free rug checker.
Mint authority: can someone print more?
The mint authority is the wallet allowed to create new tokens. If it is still set, that wallet can mint millions of fresh tokens and sell them into the pool, and every holder gets diluted. For a memecoin there is no good reason to keep it: it should read revoked (no authority).
Freeze authority: can someone stop you selling?
The freeze authority can freeze any holder's token account. A frozen account can't send, so you can't sell. This is how the classic Solana honeypot works: buys go through, then buyers are frozen. Memecoins should have it revoked.
Some legitimate assets keep it on purpose. Regulated stablecoins such as USDC keep a freeze authority so the issuer can meet legal requirements. That's why a good scanner treats recognised assets differently from a coin launched an hour ago.
Update authority: can the name and image change?
The metadata update authority can change a token's name, symbol, image and links. It can't take your tokens, but a dev who can rebrand a coin overnight can also pretend to be a different project. It's a warning, not a rug by itself.
Token-2022 extensions
Tokens made with the newer Token-2022 program can carry extensions. Most are harmless, but four deserve a close look:
- Permanent delegate: a wallet that can move or burn tokens from any holder.
- Transfer fee: a cut taken on every transfer, which can quietly be raised to make sells pointless.
- Transfer hook: custom code that runs on every transfer and can block sells.
- Default account state frozen: new holder accounts start frozen.
How to check a token
- Copy the token's contract address (mint) from pump.fun, Dexscreener or your wallet.
- Paste it into A.U.G.U.R Rugscope. The first checks shown are mint authority, freeze authority and Token-2022 extensions, each marked as passed, warning or failed.
- Or open the token on a block explorer such as Solscan, which lists the mint and freeze authority on the token page.
Popular coins already have reports in our token rug-check directory. Authorities are only the first layer: also check holders, bundles and the dev, as in how to spot a rug pull.
Memecoins are extremely risky. Most go to zero, often within hours. Nothing on this page is financial advice. Only trade what you can afford to lose.
Questions
Is it safe if mint and freeze authority are revoked?
It removes two of the most common traps, but it doesn't make a token safe. Holders can still dump, and the dev may hold a large share through other wallets.
Why does USDC have a freeze authority?
Regulated stablecoin issuers keep a freeze authority to meet legal obligations, such as freezing stolen funds. For a memecoin there is no such reason.
Do pump.fun coins have mint authority?
Coins launched through pump.fun are created by the pump.fun program with a fixed supply, so a dev can't mint more. Always confirm it with a scan, because copycat launchpads differ.
Where can I check freeze authority for free?
Paste the token address into A.U.G.U.R Rugscope at maddegen.art/rug, or open the token on Solscan.