Token Guard
CAN INSPECT
Inspect the selected Token-2022 controls supported by the scanner and mark gaps explicitly.
STILL NEEDS REVIEW
Audit arbitrary transfer-hook logic or claim exhaustive coverage of every extension.
TOKEN STANDARDS SOURCE-LINKED GUIDE
Token-2022Read the extra permissions.
Optional extensions add behaviour beyond basic transfers. The enabled extensions matter more than the token’s marketing.
READ THE SYSTEMTHEN ASK BETTER QUESTIONS
01
Extensions are optional and configuration-specific.
02
Mint-level and account-level features differ.
03
Extra authorities can remain after mint authority is removed.
Why this matters
to a memecoin.
Two tokens can look identical in a wallet while behaving differently during transfers. Understand the configured features before relying on a simple mint-authority check.
Make the mechanism visible.
Walk through the flow. Each step gives you one practical question to investigate.
INTERACTIVE CONCEPT MAPChoose a step to inspect it
STEP 01 / 04
Choose extensions
Token-2022 supports optional account and mint extensions. Many must be planned at initialization, and some combinations are incompatible.
Conceptual flow, not a live transaction trace. Use the sources below for implementation details.
The controls behind the claim.
01Transfer fee settings
Read the configured fee and the keys that can change settings or withdraw withheld amounts. Avoid assuming a displayed amount is the amount received.
Look for TransferFeeConfig + relevant token-account extensions02Permanent delegate
Determine whether this privileged delegate is configured and how its key is controlled.
Look for PermanentDelegate extension03Hooks and restrictions
Identify transfer-hook programs, default account state, pausing, and non-transferable behaviour where applicable. Unsupported decoding remains unknown.
Look for Enabled extension inventory + program-specific review04 / REFERENCE, NOT REPUTATION
PUBLIC GITHUBGo to the source.
Public Token-2022 source and clients. The guide does not assert that any particular mint enables these features.
Reading the public repository
Resolving its default branch and pinning one commit.
Read-only · No account connection · No code executionOFFICIAL REFERENCESGuide reviewed 2026-10-27
01Solana · Token extensions02Token-2022 · Official sourceGive the agent a clear job.
Repo Recon
CAN INSPECT
Inspect a public implementation’s declared structure and supported source patterns.
STILL NEEDS REVIEW
Execute the program or establish runtime safety.
Start with this repository.
Prepare Repo Recon We’ll prefill the target. You review the scope before anything runs.
Live launches require verified holder access.Keep the unknowns in view.
01
Do retained authorities match the published token policy?
02
Is every enabled extension supported by the intended venue?
03
Has any external hook program received a separate review?
04
Which checks returned unknown, and what evidence would resolve them?
A few terms, without the fog.
- Extension
- An optional feature attached to a mint or token account.
- Transfer hook
- Additional program logic involved in a token transfer.
- Permanent delegate
- A mint-configured delegate with privileged token operations.
KEEP CONNECTING THE DOTS
All guides 
