The main intervention powers
| Power | What it can do | Why it may exist |
|---|---|---|
| Mint authority | Create additional tokens. | Issuance/redemption operations, corporate actions—or uncontrolled dilution if poorly governed. |
| Freeze authority | Freeze individual token accounts under the token program. | Compliance, theft recovery, court orders or sanctions. |
| Pause | Stop transfers across the mint. | Incident response, upgrades, market disruption or regulatory action. |
| Permanent delegate / clawback | Transfer or burn tokens from an account without its owner’s signature. | Corrections, recovery, compulsory transfers or enforcement. |
| Allowlist / default frozen state | Require approval before an account can receive or move tokens. | Securities-law eligibility and transfer-agent controls. |
| Transfer fee | Deduct a configured amount on transfers. | Product economics, operational charges or protocol design. |
| Transfer hook | Call a program during transfers to apply custom rules. | Compliance logic or other programmable conditions. |
| Scaled balance / rebase | Change the displayed quantity without an ordinary transfer. | Corporate actions, price scaling or product accounting. |
Control can protect and constrain
A freeze or clawback power is not automatically evidence of abuse. Registered securities often need correction mechanisms, sanctioned-address controls and a way to implement court orders. A theft victim may prefer an issuer that can freeze and reissue.
The same power weakens finality for a lender, buyer or smart contract. If collateral can be removed after seizure, possession is less reliable. If a receiving protocol account needs approval, generic composability disappears. The relevant question is therefore not “centralized or decentralized?” but who can do what, under which procedure, with what key governance and remedy?
One freeze authority may be held by a published multisignature and governed by a transfer-agent procedure. Another may be a single ordinary wallet with no published policy. The technical capability is identical; the governance risk is not.
The key holder matters as much as the flag
RWA Sonar records whether authorities are revoked, held by a single externally owned wallet, controlled by a multisignature, or exercised through a programme. Revocation reduces one class of future intervention but can also remove a recovery path. A multisig reduces single-key risk only if signer identity, threshold and operating process are meaningful.
Upgrade authority matters too. A current transfer hook may be empty while an authority retains power to install logic later. Absence of an active restriction today is not proof that the architecture can never change.
Technical power and legal authority are separate
The chain cannot tell whether a freeze complied with the terms, whether notice was required, or whether a court would order reversal. Conversely, a contract may reserve a broad clawback right that is not presently implemented on chain. Good analysis reports both without allowing either layer to erase the other.
A right framed as “we may act at our sole discretion” is different from a power limited to sanctions, manifest error or a final court order. Procedures, appeal rights and replacement obligations matter.
Questions to ask about control
- Which extensions are active now, not merely reserved?
- Which address controls each authority, and is it a wallet, multisig or programme?
- Can the authority be rotated or the programme upgraded?
- Which document defines permitted use and notice requirements?
- Can a holder challenge an intervention or receive a replacement token?
- Would a freeze, rebase or delegate transfer break a DeFi protocol holding the token?
How RWA Sonar shows it
Control is a separate health dimension. Token pages list the active Token-2022 recipe, authority holders and observed changes. Legal templates explain how those powers interact with eligibility, recovery and protocol custody. An hourly watcher records rotations and extension changes rather than treating the first reading as permanent.
Takeaway
Self-custody answers who can sign from your wallet. Issuer-control analysis answers who can change what your signature is allowed to accomplish.