Solana
Revoke Token Delegates and Approvals on Solana
Connecting to a Solana app often means approving it to move a token for you — that permission is called a delegate. It does not expire. It sits on the account long after you have stopped using the app, and if that app is ever hacked or turns malicious, the delegate is an open door to your balance. This finds every account with an active delegate and lets you shut that door.
The exact total — platform fee plus the real network cost — is quoted in the console before anything is signed.
What a delegate can actually do
A delegate is Solana’s version of a token approval: an address you have allowed to move tokens out of one of your accounts, up to a set amount. Some approvals are for a fixed amount; some are effectively unlimited. While the delegate is active, that address can move your tokens without asking again — which is exactly what makes a forgotten approval dangerous.
Why old approvals are the real risk
The danger is not only shady apps. Even trusted protocols get hacked — the Wormhole bridge lost over $300 million in 2022 — and when that happens, every wallet that still has an active approval to the compromised contract can be drained through it. An approval you never revoked outlives your use of the app and quietly becomes someone else’s way in.
This is not the same as revoking mint or freeze authority
Worth being clear, because the words overlap. Revoking mint or freeze authority is something the creator of a token does to their own token, to prove they cannot print or freeze it. This is the opposite direction: it is you, the holder, cancelling permissions you granted to other apps over the tokens in your wallet. If you launched a token, you want the authority page as well.
Revoke exactly the ones you choose
The app reads your accounts and lists each one that currently has a delegate, with the address that holds it, so nothing is guessed. You choose which to revoke — one, several, or all of them — and sign once. Revoking simply removes the permission; it does not touch your tokens or move anything out.
Questions
- What is a token delegate on Solana?
- It is an address you have approved to move tokens out of one of your token accounts, up to an amount you set. It is how a dApp is able to trade or transfer on your behalf after a single approval — and it stays active until you revoke it.
- How is this different from revoking mint or freeze authority?
- Those are controls a token creator gives up on a token they made. This is a holder cancelling permissions they granted to apps over tokens in their own wallet. Different direction, different purpose — if you created a token, use Revoke Authorities as well.
- Can revoking break an app I still use?
- It only means that app has to ask for approval again next time you use it, which is a normal one-click step. Revoking never moves or locks your tokens — it just closes a standing permission you can always re-grant.
- How often should I check my approvals?
- Treat it like basic hygiene — a quick check every month or so, and any time you have used a new or unfamiliar app. The whole point is that a permission you forgot about is the one most likely to be abused.