SOLTidy

Wallet & security

Check and revoke token delegations on Solana

Scan a wallet for token accounts that have an active delegate, see how much each delegate may move, and revoke the ones you no longer want. Any address can be checked without connecting.

How it works

  1. 1

    Connect, or paste an address

    Connect your wallet to scan it, or paste any Solana address for a read-only check. No signature is needed to look.

  2. 2

    Review active delegates

    SOLTidy reads every SPL Token and Token-2022 account and lists those with a delegate: the token, the delegate address, the delegated amount and your balance. Allowances that cover the whole balance are flagged.

  3. 3

    Revoke what you do not need

    Select the delegations and sign. Each one becomes a Revoke instruction; many fit in a single transaction. A wallet with none gets a green No active delegations result.

What is a token delegate on Solana?

Every SPL token balance lives in a token account, and each token account has an optional delegate field plus a delegated amount. The owner sets them with the token program's Approve instruction. From then on the delegate can transfer or burn up to that amount from that one account with its own signature, without the owner signing again. The allowance counts down as it is used, and the delegate field clears itself when it reaches zero.

Three properties make this narrower than it sounds. A delegation is per token account, so approving a delegate on your USDC account says nothing about your other tokens. An account has at most one delegate at a time; a new Approve replaces the old one. And the owner can remove it at any moment with Revoke, which needs only the owner's signature and costs only the network fee. Both the original SPL Token program and Token-2022 work this way.

How Solana approvals differ from unlimited approvals on Ethereum

On EVM chains, using almost any DeFi app begins with an approval, often for an unlimited amount, and those approvals sit there for years. That is why revoke tools are part of basic wallet hygiene on Ethereum. Solana works differently: a transaction lists every account it touches and you sign for the token movement directly, so a swap or a deposit needs no standing approval at all. Most Solana dApps never ask for one.

Delegations do have legitimate uses, including some staking and subscription programs, limit-order or escrow designs, and older NFT marketplace listings that delegated the NFT instead of moving it to escrow. So a delegate you recognise from a protocol you actively use is normal. A delegate you do not recognise, especially one covering your full balance of a valuable token, is the classic trace of a drainer transaction and should be revoked immediately.

What revoking does, and what it does not protect against

Revoke clears the delegate and sets the delegated amount to zero on the selected token accounts. It is instant, it does not move or alter your tokens, and it can be undone only by you signing a new Approve. If a protocol genuinely needed the delegation, for example an open listing or an active order, that feature stops working until you approve again. SOLTidy packs many Revoke instructions into each transaction, so even a large cleanup is usually one signature.

Revoking is not a shield against signing a malicious transaction. Most Solana wallet drains do not use delegations at all: the victim signs a transaction that transfers the tokens outright, or hands over account ownership with SetAuthority. No revoke tool can reverse that or prevent the next one. Read what your wallet's simulation says before approving, and if a seed phrase may have been exposed, revoking is pointless; move the assets to a new wallet instead.

Close authority and the Token-2022 permanent delegate

Two other powers can exist over a token account, and neither is removed by Revoke. The close authority is an optional address allowed to close the account once its balance is zero and collect the rent deposit, about 0.002 SOL. It cannot touch your tokens. By default it is unset and only the owner can close. SOLTidy lists accounts whose close authority is someone else so that you know about them.

The permanent delegate is a Token-2022 mint extension chosen by the token's issuer when the mint is created. It gives one address unlimited, irrevocable delegate rights over every account of that token, in every wallet. It exists for regulated assets and clawback designs, but it also means the issuer can move or burn your balance at will. A holder cannot revoke it. SOLTidy reads the mint of each Token-2022 balance you hold and flags this extension; the only remedy is not to hold tokens whose issuer you do not trust.

Questions & answers

How do I revoke token approvals on Solana?

Connect your wallet on this page. SOLTidy scans all of your SPL Token and Token-2022 accounts and lists each one with an active delegate. Tick the ones to remove and press Revoke. Your wallet shows a transaction containing one Revoke instruction per account; after it confirms, the delegate field is empty and that address can no longer move those tokens.

How much does it cost to revoke a delegation?

SOLTidy charges nothing for this tool. The only cost is the Solana network fee, about 0.000005 SOL per transaction, and a single transaction can carry many revokes. Revoke does not create or close any account, so there is no rent involved either.

Is it safe to use? Can SOLTidy move my tokens?

The tool is non-custodial. Scanning only reads public chain data, which is why it also works for an address you paste without connecting. Revoking builds a transaction in your browser that contains nothing but Revoke instructions, which reduce permissions and cannot transfer anything. You sign it in your own wallet, and SOLTidy never sees your keys.

Do I need to revoke approvals regularly on Solana like on Ethereum?

Far less often. Solana apps normally move tokens inside the transaction you sign instead of relying on standing approvals, so most wallets have no delegations at all. An occasional check is still worthwhile, and it is a sensible first step after interacting with a site you now distrust. A clean result here means no address holds an allowance over your tokens.

I found a delegate I do not recognise. Is my wallet compromised?

Not necessarily. Look the address up in the explorer: it may be a program-derived address of a staking, order or marketplace protocol you used. If you cannot account for it, revoke it; that is free and harmless. A delegation alone does not mean your keys leaked, because you had to sign the Approve yourself. If tokens have already moved without any delegate involved, assume the seed phrase is exposed and migrate to a new wallet.

Can I undo a revoke?

Yes, by approving again. Revoking destroys nothing: your balance and the token account stay exactly as they were. If an app stops working because it depended on the delegation, such as an open listing or an automated order, it will ask you to sign a new approval the next time you use that feature.

Why can I not revoke a permanent delegate?

Because it is not stored on your token account. A permanent delegate is part of the Token-2022 mint, set by the issuer at creation, and only that design decides who holds it. The Revoke instruction affects just the ordinary per-account delegate. SOLTidy flags tokens that carry this extension so you can decide whether to keep holding them.

Is this tool free?

Revoking token delegations with SOLTidy is free; you pay only the Solana network fee of about 0.000005 SOL per transaction.

Guides that go deeper

Built and maintained by Jacob, a Solana trader who uses these tools daily. Content reviewed . Every transaction is built in your browser and signed in your own wallet — see the terms for fees.