Tokenized assets on Solana: How to check if your tokens can be frozen or withdrawn

Holding a tokenized real-world asset, you don't own the metal in the vault

Anyone who holds a tokenized real-world asset (RWA) does not own a piece of metal in the vault, but a record in a Mint Account on the blockchain. The account is controlled by the issuer, and in many cases it allows operations far beyond what most buyers assume: freezing balances, suspending transfers, and withdrawing individual tokens from someone else's wallets.

On September 11, 2026, the above situation exactly occurred, and this incident has been publicly recorded.

In this article, we examine all tokenized assets on the Solana chain that have separate minting accounts and are listed in relevant market categories. The results were unambiguous: Each of the 32 assets inspected had a "Freeze Authority". In 21 cases, a second authority was added, allowing tokens to be removed from the account without any action from the holder.

What happened to the SILV silver token on September 11

Dominion Market issued the SILV token, intended to represent one ounce of physical silver per unit. According to the provider, the multi-signature wallet to which the project belongs was hacked at approximately 01:00 UTC in the morning on Friday, September 11, 2026. About three hours later, the team noticed unusual activity. Market reports showed the coin's price fell by about 74%, and Sunrise's trading front end removed it from its listing list.

Part of the issuer's response is worth noting. Dominion withdrew liquidity, protected affected wallets, and migrated to new hardware devices. Subsequently, the project announced that any SILV balances that would be purchased between 01:00 and 14:00 UTC on that Friday would be removed from the wallet. Balances existing before this window are not affected. Transactions have been suspended; refund claims will be submitted via on-chain cheque starting at 12:00 UTC on Monday, September 14, 2026.

The ability of an issuer to withdraw a purchase without the buyer's consent is not a glitch in the process, but a property that must be built into the token to be enforced. Moreover, this attribute can be queried before purchase.

Freezing privileges and permanent proxies: Explain both privileges in one sentence

Both terms are derived from Solana's token standard and are publicly present in the casting account. Once you understand them, you can determine in minutes how much control the issuer has over any given token.

Freeze Authority

Freeze authority is an address that allows individual token accounts to be frozen. The frozen balance, although visible, cannot be sent or sold until it is released again at the same address. It exists in the classic Token program as well as the newer Token-2022 program.

Permanent Delegate

Permanent proxy is an extension of the Token-2022 program that is more powerful: the address stored here is considered a permanent authorization for all accounts holding the token, and balances can be transferred or destroyed without the holder's consent. This is the technical basis for the kind of Clawback announced by Dominion. A complete list of these extensions can be found in the Solana developer documentation.

In practice, the difference between the two is crucial. Freezing permissions just locks your balance in place, while permanent agents take it away. The price of the underlying assets does not matter here; the development of the Solana network will not change these permissions because they are anchored in individual tokens, not the network itself.

Our measurements: Of the 32 tokenized assets on Solana, 32 have frozen permissions

On September 13, 2026, we checked the minting accounts of all tokens listed in the real-world asset and tokenized gold market categories and with Solana addresses. A total of 35 addresses. We excluded three of them because they did not represent supporting assets, but infrastructure or collectibles. The remaining 32 include tokenized stocks, fund units, money market instruments and precious metals.

Each cast account is queried directly through the public Solana node and the frozen permissions and active Token-2022 extension fields are evaluated. Cryptoticker.io collected this data on September 13, 2026.

• Freezing permissions are set for all inspected assets in 32/32. There is not an asset in the basket that is missing.
• 26 run under the Token-2022 program, and 6 run under the classic token program.
• 21 additional carry permanent agents.
• 19 overall pauses can be extended through pausable.
• 19 are locked at the beginning of new accounts and are only released after approval, which is equivalent to a white list mechanism.
• 20 routes to route each transfer via transfer hook, i.e. via an external program code that can refuse the transfer.

This integrity is impressive. In many of these questions, the answer is often somewhere between the parties. Here, the answer is 32 to 0.

The lock is not in your wallet, but in the coin minting account.

Recourse through permanent proxy: 21 of the 32 tokens can be recovered

The 21 assets with permanent proxy are distributed in various categories: tokenized stocks of large technology companies, tokenized index funds, short-term government bond funds, a securitized credit fund, and several precious metal tokens, including SILV. For SILV, the query showed one peculiarity that explained what happened on Friday: The frozen permissions and the permanent proxy were located at the same address. The person who controls the key can lock the balances and withdraw them at the same time.

At the time of our inquiry, the supply was approximately 93,516 SILVs, and there should be corresponding silver positions to match them based on one ounce per token. Addresses with both permissions belong to the system program on the chain. This means it is a normal key address or derived address, rather than an account for an on-chain multi-signature program. It is impossible to tell from the casting account whether there are multiple signatures behind the key. Dominion claimed it was a compromised multi-signature wallet.

How to check your own casting account in two minutes

The good news about this situation is that all key information is public. You don't need an account, registration or paid services. You only need the coin's minting address, which will be displayed on every transaction front end and block browser.

Block Browser Path

Open the Solana browser and enter the casting address in the search field. The token overview page displays two entries. Under "Freeze Authority", you will find an address or prompt stating that it is not set. Below it, if the token is running under Token-2022, the browser will list the active extensions. If a "Permanent Delegate" appears, the issuer can move your position. If a "Default Account State" appears, your account is initially locked and requires approval first.

RPC call path

If you want more accurate results, you can ask the node directly. It only takes one call, and the answer contains all plain text fields:

curl -s https://api.mainnet-beta.solana.com-X POST \ -H "Content-Type: application/json" \ -d '{"jsonrpc":"2.0","id":1,"method":"getAccountInfo", "params":["MINT_ADDRESS",{"encoding":"jsonParsed"}]}'

There are three important points in the response: List of freezeAuthority,mintAuthority, and extensions. If Mint Authority is set, it means that new units can be created at any time. If it is empty, the supply is fixed. For supported real-world assets, it is normal to set up casting permissions because new deposits require new tokens. But it also turns the problem to supporting proof.

Why publishers build these permissions in

It is too simple to interpret these findings as omissions. Anyone bringing regulated assets into a public blockchain faces obligations that are difficult to meet without such interference. Issuers must comply with sanctions lists, respond to court orders, adjust positions in corporate actions, and settle claims in bankruptcy. Freezing rights is a standard tool, and for tokenized securities, it is actually a prerequisite for approval.

The price is to replace illusion with clarity. Tokenized real-world assets technically behave like cryptocurrencies, but legally behave as claims on the issuer. Just because anyone keeps their key in their wallet does not mean they have the final say on the balance. For Bitcoin in hardware wallets, the situation is different: No one there can suspend transfers. This difference will not disappear because the two are displayed side by side in the same wallet interface.

Permanent proxy means that the issuer can withdraw individual positions from other people's accounts.

What these permissions mean for your hardware wallet

A common assumption is that having a key equals controlling a position. This is true for Bitcoin and most online tokens. But for tokenized real-world assets, this is only partially true, and the limit lies with the token itself, not your wallet. A hardware wallet protects you from others accessing your keys, but it does not protect you from the permissions that the issuer stores in the casting account.

In practice, this leads to a simple distinction worth keeping in mind: positions where no one can interfere behave differently in the event of an incident than positions where a third party has the right to intervene. Anyone who holds both types of assets should be clear about which part belongs to which category. Regarding the attribution of who is entitled to what in the event of suspicion, we have discussed the issuer risks of tokenized shares in a detailed article.

Tokenized shares on Solana also carry the same rights

For German investors, this is the most relevant part of the measurement. Since last year, tokenized stocks and index funds have been open for access through multiple trading platforms, which make up the largest group of our inspection baskets. In our inquiries, all of these assets have frozen permissions, and the vast majority have additional permanent proxies, pause functions, and transfer hooks. In other words: On Solana, full-chain intervention in tokenized equity assets is the norm.

This does not mean that there is a problem with the product. It only changes the focus you need to focus on when choosing. The interesting question is no longer the fee, but who holds the authority, which regulatory body the entity is accountable to, and what the terms provide for freezing and dissolution. Regulated counterparties are not luxury goods here; they are the difference between orderly procedures and social media announcements.

SILV Case: Actions that affected holders can take from September 14

Anyone purchasing SILV between 01:00 and 14:00 UTC on September 11 should assume the balance has been removed. According to the provider, a process will be opened at 12:00 UTC on September 14, 2026, through which claims can be submitted in the USDC; checks will be made on-chain. There are three points to note here:

1. Keep evidence before doing anything. This includes the signature of the relevant transaction, UTC time and wallet address used. Screenshots of the transaction interface cannot replace the transaction signature.
2. Be wary of speculators. Each major event generates a page within a few hours promising a refund and asking you to sign or approve in return. Refunds never require your approval to transfer your positions.
3. Use only the routes specified by the issuer. Official information is on the provider's website, and only the information that appears there will apply to your case.

What our survey does not show

The value of the measurement depends on the statement of its limitations. Our query reads the technical status of the casting account, and that's all. It does not say whether the support of the statement actually exists because it is not visible on the chain. It also does not say who has the permission addresses and how many signatures are needed to use them. For tokens on other chains, this approach does not work at all; Ethereum and its standards have their own mechanisms, have different names and work in a similar way.

It also does not check whether permissions have been used. For the vast majority of the 32 assets, there is no public occasion to indicate this. This measurement answers only one question: whether possibilities exist. The answer to tokenized real-world assets on Solana is all yes.

RWA Tokens and Freeze Rights: Summary of Points

• Check casting accounts before purchasing. Frozen permissions, cast permissions and extended lists can be queried in two minutes. For anything designed to run without external rights, self-hosting remains the benchmark; for which devices are suitable for it, see Hardware Wallet Comparison.
• Focus on who holds authority and who supervises them. For tokenized securities, intervention options are inevitable; unregulated counterparties are avoided. EU-licensed trading venues can be viewed in the Overview of Regulated Crypto Exchanges.
• Record purchases and inflows without interruption. In dissolution, refunds, and subsequent tax returns, the moment of record counts, not your memory. Suitable tools can be found in the Overview of Cryptotax Tools and Portfolio Trackers.

(As of September 13, 2026. This article does not constitute investment advice. Price and fee structures are subject to change; please check terms with your provider before purchasing.)