What issuers can do.
Token-2022 extensions turn into concrete powers over holders. Here is how often each one is granted on traded tokens, and how the control score adds them up.
Transfer hook
A program runs on every transfer and can block or reshape it.
Hook switch
Can attach or change the transfer hook program at any time.
Permanent delegate
Can transfer or burn tokens from any holder's wallet.
Pause
Can halt all transfers, mints and burns of the token.
Freeze
Can freeze individual token accounts.
Frozen by default
New accounts start frozen; only approved wallets can hold it.
Mint
Can create new supply.
Transfer fee
A cut of every transfer is withheld for the issuer.
Fee switch
Can change the transfer fee, up to its configured maximum.
UI multiplier
Can rescale displayed balances (used for stock splits and dividends).
Close mint
Can close the mint account once supply is zero.
Confidential transfers
Balances and amounts can be hidden; an auditor key may see them.
Non-transferable
Tokens cannot be moved once received.
Interest bearing
Displayed balances accrue interest at a rate the authority sets.
The control score
Each power adds points; the total is capped at 100. It measures how much the issuer can do, not whether they will — stablecoins and tokenised stocks score high by design because regulators require these switches.
| Active transfer hook | +30, +10 if the hook program is upgradeable, −10 if immutable, −5 if its build is verified |
| Hook switch (empty slot, live authority) | +15 |
| Permanent delegate | +30 |
| Pause authority | +15, and +40 more while paused |
| Frozen by default (allowlist) | +20 |
| Freeze authority | +10 |
| Mint authority | +10 |
| Transfer fee | +5 plus 1 per 1% fee, capped at 15; +5 if the fee can be changed |
| UI multiplier authority | +5 |
| Interest rate authority | +3 |
Labels: Low < 15 · Moderate 15–34 · High 35–59 · Critical 60+. Controls are read straight from each mint account on Solana and re-checked every 10 minutes for busy tokens, every 6 hours for the rest.