Posts: Solana token and program safety — deeptally.io

Short explainers on the on-chain facts behind a Solana token or program: mint and freeze authorities, Token-2022 extensions, program upgrades and cost basis.

• Mint authority and freeze authority on Solana — deeptally.io: What a Solana token's mint and freeze authorities can do, why revoking them is permanent, and how USDC and PYTH differ, with live on-chain examples.
• Token-2022 permanent delegate explained — deeptally.io: A Token-2022 permanent delegate can move or burn any holder's tokens without their signature. Why issuers use it, and how to check a token for one.
• Token-2022 transfer fees and transfer hooks — deeptally.io: How Token-2022 transfer fees are withheld and collected, how a transfer hook can block a transfer, and how to see both on a token before you buy.
• Upgradeable vs immutable Solana programs — deeptally.io: Who can change a Solana program's code: the upgrade authority, how to tell an immutable program, and live examples from Jupiter and the SPL Token program.
• Cost basis on Solana: swaps, fees and rent — deeptally.io: How deeptally.io computes cost basis from Solana transactions: swaps as two legs, FIFO, LIFO, HIFO and average methods, network fees, and rent that is never a sale.
• Who can print more of a token? We checked 27 — deeptally.io: Can the people behind a token create more of it or freeze your balance? We checked 27 hand-picked Solana tokens: 16 have neither power, with the counts and how we checked.
• xStocks versus SPY: how closely SPYx tracks — deeptally.io: Does a tokenized S&P 500 fund on Solana trade at the price of the real thing? We watched SPYx for 29 days: while US markets were open, the typical gap was about 0.03%, with the method and the gaps in the data.