Every token on Solana has two settings that decide how much power its creator kept after launch. If you trade meme coins, these are the first two things to check, and they take seconds.
Mint authority: can someone print more?
The mint authority is a wallet allowed to create new tokens.
- Disabled (revoked): the supply is fixed forever. Nobody can add more.
- Active: the holder of that wallet can create any amount, any time.
Why it matters: if a dev can mint a billion new tokens and sell them, every existing holder gets diluted to nothing in one transaction.
Freeze authority: can someone lock your tokens?
The freeze authority is a wallet allowed to freeze any holder's token account. A frozen account can't send or sell.
- Disabled: nobody can freeze your tokens.
- Active: the holder of that wallet can lock you in while they sell.
This is one of the main ways a "honeypot" works on Solana: you can buy, then you can't sell.
When an active authority is normal
Not every active authority is a scam. Stablecoins like USDC keep both authorities because the issuer (Circle) needs to create and redeem dollars and comply with law enforcement. That's expected for an issuer-run asset, and SENTINEL labels these as issuer-controlled rather than flagging them as rugs.
For an anonymous meme coin, there's no good reason to keep either one. Treat an active mint or freeze authority on a meme coin as a serious warning.
What about Pump.fun coins?
Coins created on Pump.fun normally launch with mint and freeze authority both disabled. That's good, but it means these two checks will usually pass on Pump.fun coins, and the danger comes from other places: concentrated holders, bot volume and serial-launcher devs. Passing these two checks is the start of a scan, not the end.
Token-2022: the hidden third check
Some tokens use Solana's newer token program, Token-2022, which supports "extensions." A few of them give the creator extra control, for example:
- Transfer fees: a cut taken on every transfer, which can be set high.
- Permanent delegate: a wallet that can move or burn tokens from any holder.
- Transfer hooks: custom code that runs on every transfer and can block it.
- Default frozen accounts: new holders start frozen.
A coin can have mint and freeze authority disabled and still be dangerous because of an extension.
How to check
- By hand: open the token's page on a Solana block explorer (such as Solscan or the official Solana Explorer) using its mint address. The overview shows the mint and freeze authority, and which token program it uses.
- With SENTINEL: paste the mint address. The scan reports mint authority, freeze authority and Token-2022 extensions as the first three of its 12 checks.
Scan any token free on SENTINEL →
Not financial advice. On-chain checks reduce risk; they can't remove it.