anceta

Mint and freeze authority on Solana, explained

Two switches on every Solana token decide whether anyone can print more of it or lock your balance. What they do, how to check them, and why “revoked” is now the norm rather than a safety sign.

By Anceta ResearchPublished 6 min read

pump.fun coins with both revoked
100%
1,500 of 1,500 coins that traded
Of those, rugged anyway
19.5%
293 coins
pump.fun coins on Token-2022
99.2%
the newer token program, with extensions
Live transfer fee, smaller launchpads
31.2%
156 of 500 coins sampled
On this page
  1. What the two authorities do
  2. How to check them
  3. What 2,500 launches show
  4. The switches that matter now
  5. What to check instead
  6. How we checked

What the two authorities do

Every token on Solana has a mint account, and that account can name two authorities.1

  • Mint authority is the wallet allowed to create new tokens. While it exists, the supply is not fixed: its holder can mint more at any time and sell them into the market, which dilutes everyone else.
  • Freeze authority is the wallet allowed to freeze token accounts. A frozen account keeps its balance but can't receive, transfer or burn tokens until it is thawed.2 For a holder, that means being unable to sell.

Either authority can be revoked by setting it to none, and that is permanent: once removed, it can never be restored.1 A token with both revoked has a fixed supply, and nobody can freeze its holders. That is why “mint revoked, freeze revoked” became one of the first things people check.

How to check them

The quickest way is an explorer. Open the token's page on Solscan, Solana Explorer or any terminal that shows token details, and look for the Mint Authority and Freeze Authority fields. Empty, “none” or “disabled” means revoked. A wallet address means someone still holds the switch.

To check without trusting a website, ask a Solana RPC node for the token's mint account directly:

curl https://api.mainnet-beta.solana.com -X POST \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"getAccountInfo",
       "params":["<TOKEN MINT ADDRESS>",{"encoding":"jsonParsed"}]}'

In the answer, look under parsed.info: mintAuthority and freezeAuthority are null when revoked. For a Token-2022 token, the same answer lists its extensions, which matter more today (see below).

What 2,500 launches show

We took a random sample of coins launched between October 23 and 30, 2026: 1,500 pump.fun coins that traded (at least three holders in their first ten minutes), 500 from Meteora's launchpad and 500 from smaller launchpads. Then we read each token's mint account from Solana.

Figure 1Every coin passed. One in five rugged anyway.1,500 pump.fun coins that traded, scaled to 100. All had mint and freeze authority revoked.
  • 80 passed both checks, did not rug
  • 20 passed both checks, then rugged

Source: Anceta. Random sample of launches from October 23–30, 2026; token accounts read from Solana on October 31, 2026.

Show the numbers
pump.fun coins that tradedCoinsShare
Both authorities revoked1,500100.0%
Revoked, and did not rug1,20780.5%
Revoked, and rugged29319.5%

Every pump.fun coin in the sample had both authorities revoked: 1,500 of 1,500. Of those, 293 (19.5%) rugged, about the same share as pump.fun coins overall. On the other launchpads the picture was the same: 499 of 500 Meteora coins and 500 of 500 from smaller launchpads had both revoked. Across all 2,500, one coin still had a mint authority and none had a freeze authority.

So the check is not wrong, it is just answered in advance. A coin that fails it is a serious warning. A coin that passes has told you almost nothing, because nearly every launchpad coin passes.

The switches that matter now

Most new coins no longer use Solana's original token program. 99.2% of the pump.fun sample, 73.6% of the Meteora sample and 83.6% of the smaller launchpads' coins were created with Token-2022, the newer program whose tokens can carry extensions: optional features fixed when the token is created.3 Some of them give someone power over holders' tokens:

  • Transfer fee: a share of every transfer is withheld, so selling costs more than the price suggests.
  • Transfer hook: every transfer also runs another program, which can make transfers fail.
  • Permanent delegate: one address can move or burn tokens from any holder's account.
  • Default state: new token accounts start frozen until someone thaws them.
  • Pausable: an authority can stop transfers for everyone.
Figure 2Coins with a live transfer fee, by where they launchedShare of sampled coins whose Token-2022 transfer fee was switched on.
  • pump.fun0.0%
  • Meteora launchpad1.0%
  • Smaller launchpads31.2%

Source: Anceta. Random sample of launches from October 23–30, 2026; token accounts read from Solana on October 31, 2026.

Show the numbers
LaunchpadCoins readToken-2022Live transfer feeLive transfer hook
pump.fun (coins that traded)1,5001,48800
Meteora launchpad50036857
Smaller launchpads5004181560

The pump.fun coins carried nothing but their name and metadata. On the Meteora launchpad, 5 coins had a live transfer fee and 7 a live transfer hook. On the smaller launchpads, 156 of 500 coins (31.2%) charged a transfer fee. None of the 2,500 had a permanent delegate, a frozen default state or a pause switch.

A fee is not a sign of bad intent on its own. But it is part of what you pay to sell, and it stays invisible unless you look.

What to check instead

Since the authority check passes almost every launchpad coin, the signs that separate rugs from the rest are elsewhere: the creator's record, who holds the supply in the first seconds, and whether the coin has an X account and a website at all. We tested each of them on 153,941 pump.fun coins in How to check if a memecoin is a rug pull.

How we checked

Sample. 1,500 pump.fun coins that traded, 500 Meteora launchpad coins and 500 coins from smaller launchpads, drawn at random from launches between October 23 and 30, 2026 (UTC).

Reading. Each token's mint account was read from Solana on October 31, 2026: its program, its mint and freeze authorities, and its Token-2022 extensions. An extension counts as live when it is switched on (a fee above zero, a hook program set, a delegate set).

Rugged. Anceta's rule (what counts as rugged), as in the October 2026 report.

Sources

  1. 1.Solana documentation, Set Authority. mint and freeze authority, and revoking them
  2. 2.Solana documentation, Freeze Account. what freezing a token account does
  3. 3.Solana documentation, Token Extensions. the extensions a Token-2022 token can carry

Pattern analysis, not financial advice. Similar coins can behave differently.