Coinatio
Coinatio Research
Token Safety7 min read

Solana Permanent Delegate Explained: What the Token-2022 Extension Can Do

Token-2022 extends Solana's token model with optional features stored on the mint or token account. Permanent Delegate is one of the most consequential mint extensions. It designates an authority that can transfer or burn tokens from token accounts belonging to that mint. The word permanent describes the delegate's mint-wide reach, including newly created accounts, rather than proving that the authority address can never be changed.

Editorial research by Coinatio, checked against the primary documentation cited below. Educational content only.

Editorial illustration for Solana Permanent Delegate Explained: What the Token-2022 Extension Can Do
Key takeaways
  • A permanent delegate can authorize transfers and burns from token accounts for the mint without each account owner's signature.
  • Unlike an ordinary account delegate, the extension applies across the mint and is not limited to one account's approved allowance.
  • The extension does not silently remove every other Token-2022 rule, so frozen accounts and additional extensions still matter.
  • Inspection should cover the current delegate, authority-change history, controlling program, and upgrade authority where applicable.

Why Token-2022 has a permanent delegate

The original Token Program provides account-level delegation. A token account owner can approve a delegate for a defined amount and later revoke that approval. Permanent Delegate moves the capability to the mint level. Once initialized, the designated authority is recognized for token accounts associated with that mint, including accounts created later.

Possible applications include regulated asset controls, recovery systems, game administration, or other models where an issuer needs continuing transfer or burn authority. Those use cases explain the mechanism but do not evaluate a particular deployment. The important observation is mechanical: holders do not have exclusive authorization over transfer and burn while an effective permanent delegate exists.

Actions the delegate can authorize

Token-2022 recognizes the permanent delegate as an authority for transfer and burn instructions. It may move tokens from a holder's token account to another valid token account or burn units, reducing that account balance and the mint's supply. It does not need a separate per-account approval or allowance from the token account owner.

This power should not be overstated. The delegate does not gain ownership of SOL in the wallet, cannot sign arbitrary wallet transactions, and does not control unrelated mints. Token account state and other extensions still participate in instruction processing. For example, a frozen account remains subject to frozen-account checks, and a transfer may also invoke configured fee or hook behavior.

Permanent delegate versus nearby authorities

Mint authority creates new token units. Freeze authority freezes or thaws token accounts. A transfer-fee configuration authority changes fee parameters, and a withheld-fee authority can collect withheld fees. Permanent delegate is separate from all of them. Seeing one address in several roles means it holds several permissions, not that the roles are interchangeable.

Also distinguish the extension from a wallet's normal owner authority and approved delegate. An ordinary delegate has an allowance recorded on one token account. The permanent delegate's scope comes from the mint extension. Review tools should label these roles separately because a generic owner or authority label can conceal the practical difference.

How to inspect a mint safely

First verify that the mint account is owned by Token-2022. Then use an explorer or decoder that explicitly displays Token-2022 extensions. Find Permanent Delegate in the mint's extension data and record the full authority address. If a tool displays no extension, confirm with another decoder rather than assuming the feature is absent.

Inspect authority-change transactions and determine what controls the current address. A wallet can act directly. A multisignature may require a threshold. A program-derived address depends on a program, whose source verification and upgrade authority deserve separate review. Check the observation time because the current authority and controlling program may change after an earlier analysis.

  • Use read-only RPC or explorer views.
  • Confirm the Token-2022 program owner.
  • Decode all mint extensions, not only Permanent Delegate.
  • Trace program and upgrade control for program-derived authorities.

Limitations and reporting language

The presence of Permanent Delegate establishes a capability, not the purpose or likelihood of its use. Documentation may explain intended controls, but on-chain authority determines what the token program will accept. Conversely, removing or changing the delegate does not address unrelated permissions, holder concentration, external custody, liquidity, or upgradeable programs used elsewhere in the token system.

Some explorers decode Token-2022 incompletely, and simplified dashboards may confuse permanent delegates with transfer-hook authorities. Report the mint, program, extension, current authority, and retrieval time. Describe the exact actions available instead of assigning a broad safety score or categorical verdict.

Sources

  1. Solana Docs: Token Extensions
  2. Solana Program Library: Token-2022
  3. Solana Token-2022: Permanent Delegate Extension

This article explains technical and market-data concepts. It is not financial, legal, tax, or investment advice. Verify current chain state and primary documentation independently.

Continue researching