Disclosure: Jumpbit builds the tool used in this guide. It is listed in the directory under the same rules as every other tool, see the editorial policy.
Why Token-2022 needs its own checks
Token-2022 lets a mint switch on extensions that change how every transfer behaves. A buyer who only checks the old mint and freeze authority can miss them.
The traps
- Permanent delegate: an address that can move or burn tokens in any holder account.
- Transfer hook: a program that runs on every transfer and can block selling.
- Default frozen accounts: new accounts start frozen until the authority unfreezes them.
- Pausable transfers: the authority can stop all transfers.
- Non-transferable mints: tokens that can never be moved.
- Transfer fees, including scheduled increases: a fee that rises later.
- Balance rescaling: displayed balances can change.
- Mint close authority and mutable metadata.
Jumpbit Rug Check says it reads all of these from the mint. See transfer fees explained and how to check a token. Open Rug Check.