The Third Authority
By now, most experienced Solana traders know to check for Mint Authority (the ability to print infinite tokens) and Freeze Authority (the ability to lock a wallet). However, there is a third, lesser-known authority in the SPL token standard that scammers are increasingly exploiting: Revoke Authority.
While often confused with "revoking" an authority (the act of giving it up), the Revoke Authority itself is a specific technical feature. If a developer retains this power, they have the ability to forcefully claw back or burn tokens directly from any user's wallet without their permission.
The Artificial Scarcity Trap
Why would a developer want to burn tokens out of someone's wallet? The answer is chart manipulation.
Here is how the scam plays out:
- The Hype: The token launches and retail investors buy in. The market cap stabilizes.
- The Burn: The developer uses the Revoke Authority to silently burn 50% of the tokens held by the top 100 retail wallets.
- The Illusion: Because the total circulating supply suddenly drops, but the SOL in the liquidity pool remains the same, the price of the token artificially skyrockets on the chart.
- The Trap: New investors see the massive green candle and FOMO in. The developer then dumps their own hidden stash of tokens into the newly enriched liquidity pool, crashing the price.
A Total Loss of Funds
For the retail investors who had their tokens burned, the loss is absolute. One minute you hold 1,000,000 tokens, and the next minute your balance is zero, with no transaction history showing a sell order. Your funds were simply incinerated by the developer.
Protecting Your Portfolio
Manually auditing a smart contract for obscure delegated authorities is incredibly difficult for the average trader. This is why automated security checks are mandatory.
When you scan a contract with RugPullShield, our AI engine checks every single authority flag on the Solana blockchain. If a developer has retained the ability to claw back or burn user funds, we immediately flag the token with a CRITICAL RISK warning. Do not let your portfolio get incinerated by a backdoor.