Token-2022 is Solana's newer token program. Its extensions let a creator tax every transfer, run code on every transfer, move tokens out of any wallet, or freeze new accounts by default. Each one can turn a memecoin into a trap.
Token-2022, also called Token Extensions, is a second token program on Solana. It does everything the original program does, plus optional extensions written into the mint. Projects use them for compliance, royalties or confidential transfers. In memecoins, the same features become traps that a price chart never shows.
A transfer fee takes a percentage of every transfer, sales included. A fee authority can often change the rate later. A token can launch at 0 % and be switched to a punishing rate once people have bought. Any fee above 10 % is a red flag; a fee that can still be changed is a warning even at 0 %.
A transfer hook makes every transfer call another program. That program can reject transfers it does not like, for example sales to a DEX from wallets that are not on an allow list. It is a programmable honeypot, and reading the hook program is not something a trader can do in a hurry.
A permanent delegate is an address that can transfer or burn tokens from any account of that mint, without the owner's signature. It was designed for things like clawing back regulated assets. In a memecoin, it means your balance belongs to you only until the delegate decides otherwise.
A mint can make every new token account start frozen, so buyers need the creator to thaw them before they can sell. A pausable mint can stop all transfers at once. Both are switches held by someone else.
No. Many legitimate tokens use extensions such as metadata or interest-bearing balances. The risky ones are those that give someone power over holders' transfers: fees, hooks, delegates, default freeze and pause.
Its program id is TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb instead of the original token program. TokenGuard reports the program and every risky extension it finds.
Some can. A fee rate can be changed by its authority, and authorities can be revoked. That is why a check right before buying matters more than one done at launch.
See the tokens TokenGuard has checked and what happened to them 24 hours later.