Token Launch
Mint authority vs freeze authority on Solana, explained
Mint authority lets an address create new tokens; freeze authority lets it lock any holder's account. What each risks, how to check both and what revoked means.
Key takeaways
- The mint authority on a Solana token is the address allowed to create new tokens, so while it is active the supply is not fixed and holders can be diluted without warning.
- The freeze authority on a Solana token is the address allowed to freeze any holder's token account, which blocks transfers, sales and burns from that account until it is thawed.
- Revoking a Solana mint or freeze authority sets the field to None on the mint account, and the SPL Token program has no instruction that can set it again.
- Stablecoins such as USDC keep both the mint authority and the freeze authority because issuing, redeeming and legal compliance require them; a memecoin has no comparable reason.
- Anyone can check a Solana token's authorities for free by opening the mint address on an explorer or pasting it into a read-only authority lookup.
The short answer#
The mint authority on a Solana token is the address allowed to create new supply. The freeze authority is the address allowed to freeze any holder's token account so the tokens cannot move. Both are optional fields on the token's mint account, both can be set to None permanently, and anyone can read them for free.
An active mint authority exposes holders to dilution. An active freeze authority exposes holders to being unable to sell. They are independent risks, and checking one tells you nothing about the other.
What are the mint authority and freeze authority at the SPL Token program level?#
Every token on Solana is a mint account, 82 bytes of data owned by the SPL Token program (or a larger account owned by Token-2022). That account stores five things: the mint authority, the supply, the decimals, an initialized flag and the freeze authority. There is no contract code per token. The rules are the same for every mint because one shared program enforces them.
The mint authority is an optional public key. The MintTo instruction, which creates new tokens and adds them to any token account, only succeeds when signed by that key. A creator needs it at the start, because that is how the initial supply comes into existence.
The freeze authority is a second optional public key. The FreezeAccount instruction, signed by that key, marks a specific token account as frozen. A frozen token account cannot send tokens or burn them. ThawAccount, signed by the same key, reverses it. The freeze authority must be chosen when the mint is initialized: a mint created without one can never gain one later.
There is no single "owner" of an SPL token in the Ethereum sense. Control is split between these two fields and, separately, the Metaplex metadata update authority that governs the name and logo.
| Mint authority | Freeze authority | |
|---|---|---|
| What it can do | Create new tokens into any account | Freeze and thaw any token account of the mint |
| Instruction it signs | MintTo | FreezeAccount, ThawAccount |
| Risk to a holder | Dilution: new supply sold into the pool | Cannot transfer, sell or burn the token |
| Affects existing balances? | No, but their share of supply shrinks | Yes, the frozen account is locked in place |
| Can be added later? | No, once None it stays None | No, and not at all if never set at creation |
| Legitimate uses | Stablecoins, bridges, emissions, staking rewards | Regulated issuers, permissioned tokens, default-frozen designs |
| Typical scam use | Mint a huge amount and dump it | Honeypot: buyers can buy but not sell |
| CLI to revoke | spl-token authorize <MINT> mint --disable | spl-token authorize <MINT> freeze --disable |
| Cost to revoke | Network fee only via CLI; 0.02 SOL via SOLTidy | Network fee only via CLI; 0.02 SOL via SOLTidy |
What does a holder risk while the mint authority is active?#
While a mint authority exists, the supply figure you see is only the supply so far. The key holder can mint any amount, up to the 64-bit limit, into their own wallet in one transaction and sell it into the liquidity pool. Holders cannot block it and get no warning. The existing balances do not change; what changes is that they now represent a smaller share of a larger supply, and the pool's SOL has left with the seller.
This is why burned liquidity alone proves little. A locked pool with an active mint authority is a locked pool the creator can drain by printing tokens, a point I expand on in burned vs locked liquidity.
What does a holder risk while the freeze authority is active?#
While a freeze authority exists, the issuer can stop any individual holder from selling. The classic honeypot works this way: the token trades normally, buyers arrive, and their token accounts are frozen shortly after they buy. The chart keeps rising because only the insiders can sell. A freeze shows up as SPL Token error 0x11 (account frozen) when the victim's swap fails.
The scope is limited to that mint. A freeze authority cannot touch your SOL or your other tokens, and it cannot take the frozen tokens away; on the classic SPL Token program it can only immobilise them. A frozen account cannot be emptied, and a token account with a balance cannot be closed, so the roughly 0.00204 SOL of rent inside stays stuck too.
DEXs care as well. A frozen pool vault would trap every liquidity provider's funds, so Raydium's pool creation has historically rejected classic SPL mints with an active freeze authority, and other venues show warning badges.
When is it legitimate to keep the authorities?#
Keeping an authority is legitimate when the token's design needs it and the key holder is accountable. USDC is the standard example: Circle keeps the mint authority because USDC is minted on deposit and burned on redemption, and keeps the freeze authority to comply with sanctions and court orders. USDT and PYUSD work the same way. Holders accept the trade-off because the issuer is a known, regulated entity.
Other reasonable cases:
- Bridged and wrapped assets, where a bridge program mints tokens as deposits arrive on the other chain.
- Emission schedules and staking rewards that are minted over time, ideally with the authority held by a program or a multisig rather than one person's wallet.
- Security tokens and permissioned assets that must restrict who can hold them.
- Tokens still being set up. Creating a Metaplex metadata account requires the mint authority's signature, so a token with no name and logo yet must keep the authority until that is done.
What these have in common is a reason you can state in one sentence and a key holder you can identify. A memecoin with an anonymous deployer has neither. When I look at a new token, an active authority is not automatically a scam, but the burden of explanation is on the team.
How do you check any Solana token's authorities yourself?#
Checking takes under a minute and requires no wallet. You need only the token's mint address, which every DEX and wallet shows on the token's page.
- Copy the mint address (not the pool address, and not a holder's wallet).
- Open it on an explorer such as Solscan or Solana Explorer. The token overview lists Mint Authority and Freeze Authority, each showing an address or a disabled/none state.
- If an address is shown, click it. A program or a known multisig is a different situation from a fresh wallet funded an hour ago.
- Check which program owns the mint. If it is Token-2022, look at the extensions list as well, because more powers may exist than these two fields.
The same lookup is built into the SOLTidy Revoke Mint Authority and Revoke Freeze Authority pages. Paste any mint and the panel reads the account directly from the chain and shows supply, decimals and both authorities as Revoked or Active with the holding address. That part is free and read-only, and the about page explains who builds SOLTidy and how the tools work. The revoke button only unlocks when the connected wallet is the current authority, so you cannot do anything to a token that is not yours.
From a terminal, spl-token display <MINT> prints the same fields.
What does "revoked" or "renounced" mean on-chain?#
Revoked means the authority field on the mint account has been set to None, and it is permanent. The mechanism is a single SetAuthority instruction naming the authority type (MintTokens or FreezeAccount) with no new authority. SetAuthority must be signed by the current authority. Once the field is empty there is no current authority, so no transaction can ever change it again. "Renounced" is borrowed Ethereum vocabulary for the same thing.
Points launchers get wrong:
- Transferring is not revoking. Moving the authority to another wallet, even a "dead" looking one, leaves it active. Only None counts, and explorers show the difference.
- Revoking the freeze authority does not thaw anything. Accounts frozen at that moment stay frozen forever. Thaw first.
- Add metadata before revoking the mint authority. After that, editing existing metadata still works through the update authority, for example with the Update Token Metadata tool (0.02 SOL), but creating it from scratch does not.
- Revoking changes nothing else. Balances, pools and metadata are untouched.
If you are launching, the cheapest path is not to create the problem: the Token Creator (0.1 SOL) leaves the freeze authority off by default and can revoke the mint authority in the creation transaction. The full order of operations is in the token launch checklist. The CLI does all of this for the network fee alone; the SPL Token docs cover the authorize command.
How do mint and freeze authority work on Token-2022?#
Token-2022 keeps both fields with identical behaviour, then adds further powers as mint extensions. The mint authority and freeze authority sit in the same place in the account, are revoked with the same SetAuthority instruction sent to the Token-2022 program, and are equally irreversible. SOLTidy's revoke tools send the instruction to whichever program owns the mint.
The difference is that these two fields are no longer the complete picture. A Token-2022 mint can also carry:
- a permanent delegate, which can transfer or burn tokens from any holder's account, a stronger power than freezing;
- a transfer fee with its own authority that can change the fee rate later;
- a default account state of frozen, where every new token account starts frozen and the freeze authority must thaw it. Such a token depends on its freeze authority and should not revoke it;
- a transfer hook, a custom program run on every transfer.
So "mint and freeze revoked" on a Token-2022 token answers two questions out of several. The rest are in Token-2022 explained for traders.
Bottom line#
Mint authority is about supply and freeze authority is about movement; a Solana token can have either, both or neither. Both are readable by anyone in under a minute, and both can be set to None permanently with one instruction. For stablecoins and bridges, active authorities are part of the product. For a community token, they are an unexplained power over holders, and revoking them is the cheapest credible commitment a launcher can make. It is still only one part of a pre-buy check: fixed supply and unfreezable accounts say nothing about who holds the supply or whether the liquidity can leave.
Questions & answers
What is the difference between mint authority and freeze authority on Solana?
The mint authority controls supply: it is the only address that can call MintTo and create new tokens. The freeze authority controls movement: it can call FreezeAccount on any token account of that mint, after which the holder cannot transfer, sell or burn until the account is thawed. They are two separate optional fields on the mint account, and one can be revoked while the other stays active.
Can a revoked mint authority be restored on Solana?
No. Revoking writes None into the authority field of the mint account. The SPL Token program and Token-2022 only allow SetAuthority to be signed by the current authority, and once the field is empty there is no current authority, so no transaction can ever fill it again. This applies equally to the original creator, to any tool and to the freeze authority.
Why do USDC and USDT have mint and freeze authority enabled?
Because their design requires it. A fiat-backed stablecoin mints new tokens when customers deposit dollars and burns them on redemption, so the issuer must keep the mint authority. The freeze authority lets the issuer comply with sanctions and law-enforcement requests. Holders accept this knowingly in exchange for a redeemable asset. The same fields on an anonymous memecoin carry the risk without the justification.
How do I check if a Solana token's freeze authority is revoked?
Open the token's mint address on an explorer such as Solscan or Solana Explorer and look for the Freeze Authority field; it shows either an address or a disabled state. The SOLTidy revoke freeze authority page does the same lookup: paste a mint and it reads both authorities and the supply straight from the chain, free and without connecting a wallet.
Can a Solana token freeze my whole wallet?
No. A freeze authority only affects token accounts of its own mint. It cannot touch your SOL, your other tokens or your NFTs. What it can do is freeze your account for that one token, leaving the balance visible but impossible to move or sell. Buying a token with an active freeze authority means accepting that the issuer can do this at any time.
Is a token with revoked mint and freeze authority safe to buy?
It is safer on two specific points and no safer on the rest. With both revoked, the supply cannot grow and your account cannot be frozen. The creator can still hold most of the supply, the liquidity can still be withdrawn if the LP tokens are not burned or locked, and a Token-2022 mint can carry extensions such as a permanent delegate. Treat revoked authorities as a minimum, not a verdict.
Continue reading
How to launch a Solana token: a first-timer's checklist
Launching a token on Solana is eight decisions, not one button. This checklist covers supply, metadata, what it really costs, which authorities to revoke, how liquidity works and how to verify the result like a buyer would.
How to spot a Solana rug pull: a trader's pre-buy checklist
Most Solana rug pulls use one of a handful of on-chain powers, and every one of them is publicly readable before you buy. This is the checklist I run on a new token, where to look for each item, and what it cannot tell you.
Token-2022 explained for traders: extensions that matter
Token-2022 lets a Solana token carry optional extensions, and a few of them give the issuer powers the classic token program never allowed. This is what each extension does, which ones should stop a trade, and how to check a mint.