You're looking at a new token and a scanner says "mint authority revoked" or "freeze authority revoked." Those two lines answer real questions: can more of this token be created, and can someone freeze your tokens after you buy? Here's what each one means, how to check it yourself, and how both differ from the token approvals you grant on your own accounts.
What does mint authority revoked mean?
Mint authority revoked means the token's mint authority is set to none, so no one can ever create more of that token. Supply can still shrink through burns but can't grow. It doesn't tell you who holds the existing supply, and it doesn't change the token's freeze authority.
Every Solana token has a mint account that records its supply and two optional roles. The mint authority can create new units. Once the current authority sets that role to none, no transaction can set it again, so the supply is capped for good.
If the mint authority is still active, whoever controls it can mint more units whenever they like and sell them into the market. That is a supply risk, not access to your wallet: it can't move tokens already in your account.
What does freeze authority revoked mean?
Freeze authority can freeze and thaw token accounts for that mint. A frozen account can't transfer or burn its tokens, which means a holder can't sell. When a mint's freeze authority is revoked, no one can freeze holders' accounts for that token anymore.
An active freeze authority isn't automatically a scam. Some regulated assets use it on purpose, and programmable NFTs use freezing to enforce their rules. For a new meme coin, though, an active freeze authority means someone could stop you selling, so check who holds it before you buy.
How do you check a token's mint and freeze authority?
- Copy the token's mint address, the address that identifies the token itself rather than any holder's account.
- Open it in an explorer. Solscan and Solana Explorer show the mint's details, including its mint authority and freeze authority. A revoked authority has no address; an address means someone still holds that role.
- Or use the command line.
spl-token display <MINT_ADDRESS>prints the mint authority and freeze authority, with(not set)for a revoked one. For a Token-2022 mint, it also lists the mint's extensions. - Check Token-2022 extensions too. Token-2022 mints can carry other mint-level roles, such as a permanent delegate that can move holders' tokens or a pause authority that can stop transfers. Revoked mint and freeze authorities don't remove them.
- Look at the rest of the picture. Revoked authorities don't stop large holders from selling. If the token trades in a pool, check whether its LP is burned as well.
What is the difference between token approval, mint authority, and freeze authority?
A token approval is a revocable delegate allowance on one token account. Mint authority controls whether new units can be created for the mint. Freeze authority can freeze or thaw accounts for that mint. Revoking your account delegate removes only that allowance; it does not alter issuer-controlled mint or freeze roles.
The quickest way to tell them apart is where each role lives:
| Role | Stored on | Core power | Who can remove or change it? |
|---|---|---|---|
| Token-account owner | Token account | Transfer, burn, delegate, and usually close | Current account authority through SetAuthority |
| Account-level delegate | Token account | Transfer or burn up to the approved amount | Token-account owner through Revoke |
| Close authority | Token account | Close an empty account and receive its lamports | Current close authority through SetAuthority |
| Mint authority | Mint | Create new token units | Current mint authority through SetAuthority |
| Freeze authority | Mint | Freeze or thaw token accounts | Current freeze authority through SetAuthority |
| Permanent delegate | Token-2022 mint | Transfer or burn from accounts for that mint | The current permanent delegate, not token holders |
The same wallet address can hold more than one role, but the permissions remain conceptually separate.
What does a Solana token approval let a delegate do?
An account-level delegate can transfer or burn up to the approved amount from one specific token account. Each token account has one current delegate and remaining allowance. The account owner can send a Revoke instruction to clear it without transferring tokens, burning the balance, or closing the account.
Approvals support legitimate marketplace, payment, staking, and vault flows. They can also be abused when a phishing transaction convinces you to approve an attacker. The address is not automatically malicious because it appears as a delegate; identify the app and position before revoking.
Closing a token account removes the delegate because the account no longer exists, but an account must be empty before it can close. Burning is not required to revoke a normal delegate.
Sol Incinerator's Revoke tool scans SPL Token and Token-2022 accounts with a read-only request, shows revocable account-level delegates, and lets you remove selected approvals. It charges no platform fee because revocation releases no rent; you pay only the network fee for a transaction you sign.
How are owner and close authority different?
The token-account owner authorizes ordinary transfers, burns, approvals, and authority changes. An optional close authority can close the account after its token balance reaches zero and receive the account's lamports. A close authority does not gain permission to transfer the token balance simply because it can close an empty account.
If an attacker changed token-account ownership, the original wallet can no longer fix it with Revoke; the current owner must authorize another ownership change. If you find an unfamiliar close authority while you still own the balance, prioritize moving trusted tokens to an account you control after professional incident review.
What is a Token-2022 permanent delegate?
A PermanentDelegate is a mint extension, not the ordinary delegate field on your token account. It can authorize transfers or burns from token accounts for that mint, and individual holders cannot revoke it. Only the current permanent delegate can hand the role to another address.
This is why no wallet approval scanner should claim to show everyone who could ever move every token. Our Revoke tool shows only the account-level approvals your wallet granted and can remove.
Which authority should you revoke after a suspicious dApp?
Disconnect the site in the wallet, inspect the confirmed transaction, then revoke unrecognized account-level delegates you control. Do not sign a transaction from a supposed support agent to “restore” mint or freeze authority. Those issuer-level roles are not replaced with a safe address after your account revoke.
If you exposed a recovery phrase or private key, authority cleanup is not enough. Create a fresh wallet with a new phrase and move trusted remaining assets. Read the Phantom scam-site response guide for the full workflow.
Revoke Approvals
Scan for revocable SPL Token and Token-2022 account-level delegates, inspect each allowance, and remove only the approvals you select.