Anyone holding a tokenized real-world asset does not own a piece of metal in a vault. They own an entry in a mint account on a blockchain. That account is controlled by the issuer, and in man
Anyone holding a tokenized real-world asset does not own a piece of metal in a vault. They own an entry in a mint account on a blockchain. That account is controlled by the issuer, and in many cases it allows far more than most buyers assume: freezing balances, halting transfers and pulling individual tokens out of other people's wallets. On September 11, 2026 exactly that happened, and it was publicly documented.
For this article we checked every tokenized asset that has its own mint account on Solana and is listed in the relevant market categories. The result is unambiguous: of 32 assets checked, every single one carries a freeze authority. In 21 cases a second permission is attached, one that allows tokens to be removed from an account without any action by the holder.
What happened to the silver token SILV on September 11
Dominion Market issues the token SILV, which is meant to represent one troy ounce of physical silver per unit. According to the provider, a multisig wallet belonging to the project was compromised in the early hours of Friday, September 11, 2026, at around 01:00 UTC. Roughly three hours later the team noticed unusual activity. Market reports put the token's price fall at about 74 percent, and the Sunrise trading front end removed the market from its listing.
The issuer's response is the instructive part. Dominion pulled the liquidity, secured the affected wallets and moved to new hardware devices. The project then announced that any SILV balance bought between 01:00 and 14:00 UTC on that Friday would be removed from the wallets. Balances that existed before the window opened were left untouched. Trading has been suspended since; refund claims in USDC are to be filed from Monday, September 14, 2026, at 12:00 UTC through an on-chain check.
An issuer that can unwind purchases without asking the buyers is no glitch in a process. It is a property that has to be built into the token for it to be executable at all. And that property can be looked up before you buy.
Freeze authority and permanent delegate: the two permissions in one sentence each
Both terms come from Solana's token standards and sit openly in the mint account. Once you have understood them, you can tell within minutes how much control the issuer holds over any given token.
Freeze authority
The freeze authority is the address allowed to freeze individual token accounts. A frozen balance stays visible but can neither be sent nor sold until the same address releases it again. It exists in the classic token program just as it does in the newer Token-2022 program.
Permanent delegate
The permanent delegate is an extension of the Token-2022 program and goes considerably further: the address stored there counts as permanently authorized for every account holding that token and can transfer or burn balances without the holder's consent. That is the technical basis for a clawback of the kind Dominion has announced. The full list of these extensions is in Solana's developer documentation.
In practice the difference matters a great deal. A freeze authority holds your balance where it sits. A permanent delegate takes it away. The current price of the underlying asset is irrelevant here; how Solana develops as a network changes nothing about these permissions, because they are anchored in the individual token rather than in the network.
Our measurement: 32 tokenized assets on Solana, 32 with a freeze authority
On September 13, 2026 we queried the mint accounts of every token that is listed in the market categories for real-world assets and for tokenized gold and that has a Solana address. That came to 35 addresses. We excluded three of them because they do not represent a backed asset but infrastructure or collectibles. That left 32 tokenized stocks, fund units, money market instruments and precious metals.
Each mint account was queried directly through a public Solana node, and the fields for the freeze authority and for the active Token-2022 extensions were evaluated. cryptoticker.io collected this data itself on September 13, 2026.
- 32 of 32 assets checked carry a freeze authority that is set. Not a single asset in the basket goes without one.
- 26 run under the Token-2022 program, 6 under the classic token program.
- 21 additionally carry a permanent delegate.
- 19 can be halted as a whole through the pausable extension.
- 19 start new accounts in a locked state, releasing them only after an approval, which amounts to a whitelist.
- 20 route every transfer through a transfer hook, meaning through external program code that can reject a transfer.
The completeness is remarkable. On many questions of this kind the answer sits somewhere between the camps. Here it sits at 32 to 0.

The lock does not sit in your wallet. It sits in the token's mint account.
Clawback via permanent delegate: 21 of 32 tokens can be pulled back
The 21 assets with a permanent delegate are spread across every category: tokenized stocks of large technology companies, tokenized index funds, short-dated government bond funds, one securitized credit fund and several precious metal tokens, SILV among them. With SILV the query shows a particularity that explains what happened on Friday: freeze authority and permanent delegate sit on the same address. Whoever controls that key can lock balances and withdraw them in the same move.
Supply stood at roughly 93,516 SILV at the time of our query, which at one troy ounce per token should be matched by a corresponding silver holding. The address that holds both permissions belongs on-chain to the system program. That means it is an ordinary key address or a derived address, and not the account of an on-chain multisig program. Whether several signatures stand behind that key cannot be read from the mint account alone. Dominion itself speaks of a compromised multisig wallet.
How to check a mint account yourself, in two minutes
The good news about this situation: everything that matters here is public. You need no account, no sign-up and no paid service. All you need is the token's mint address, which every trading front end and every block explorer displays.
The block explorer route
Open a Solana explorer and enter the mint address in the search field. The token's overview page shows two entries. Under Freeze Authority you will find either an address or a note that none is set. Below that the explorer lists the active extensions, provided the token runs under Token-2022. If Permanent Delegate appears there, the issuer can move your holdings. If Default Account State appears, your account starts locked and has to be approved first.
The RPC call route
If you want more precision, ask the node directly. A single call is enough, and the answer contains every field in plain text:
curl -s https://api.mainnet-beta.solana.com -X POST \ -H "Content-Type: application/json" \ -d '{"jsonrpc":"2.0","id":1,"method":"getAccountInfo", "params":["MINT_ADDRESS",{"encoding":"jsonParsed"}]}'
Three places in the response matter: freezeAuthority, mintAuthority and the list under extensions. A mint authority that is set means new units can be created at any time. If it is empty, the supply is fixed. For a backed real-world asset a set mint authority is normal, because new deposits require new tokens. That does shift the question over to the proof of backing.
Why issuers build these permissions in at all
It would be too easy to read the findings as sloppiness. Anyone bringing regulated assets onto a public blockchain is subject to obligations that are hard to meet without such interventions. An issuer has to observe sanctions lists, respond to court orders, adjust holdings in a corporate action and settle claims in an insolvency. A freeze authority is the standard tool for that, and with tokenized securities it is effectively a precondition for approval.
The price for it is clarity instead of illusion. A tokenized real-world asset behaves technically like a cryptocurrency, and legally like a claim against an issuer. Anyone keeping it in their own wallet holds the keys without holding the final say over the balance. With Bitcoin on a hardware wallet it works differently: there is nobody who could halt a transfer. That difference does not disappear because both sit side by side in the same wallet interface.

Permanent delegate means the issuer can pull individual holdings out of other people's accounts.
What the permission means for your hardware wallet
The common assumption is that owning your keys equals controlling your holdings. For Bitcoin and for most network tokens that holds true. For tokenized real-world assets it holds only in part, and the limitation sits in the token, not in your wallet. A hardware wallet protects you from someone else reaching your keys. It does not protect you from a permission the issuer has stored in the mint account.
In practice that leads to a simple distinction worth keeping in mind. Holdings nobody can interfere with behave differently in an incident from holdings where a third party has a say. Anyone who holds both should know which part falls into which category. On the question of who is entitled to what in case of doubt, we have already written up the ownership position on tokenized stocks and issuer risk in detail.
Tokenized stocks on Solana carry the same permission
For investors in Germany this is the most relevant part of the measurement. Tokenized stocks and index funds have been accessible through several trading venues since last year, and they make up the largest group in the basket we checked. In our query every one of these assets carried a freeze authority, and the large majority additionally carried a permanent delegate, a pause function and a transfer hook. Put differently: with a tokenized equity asset on Solana, the full chain of intervention is the normal case.
That does not speak against the product. It only shifts what you pay attention to when choosing. The interesting question is then less the fee and more who holds the permission, which supervisor that entity answers to, and what the terms say about freezing and unwinding. A supervised counterparty is no luxury here; it is the difference between an orderly procedure and an announcement on a social media account.
The SILV case: what affected holders can do from September 14
Anyone who bought SILV between 01:00 and 14:00 UTC on September 11 has to assume that the balance was removed. According to the provider, a procedure opens on September 14, 2026 at 12:00 UTC through which claims can be filed in USDC; the check is to happen on-chain. Three things matter here.
- Secure your evidence before you do anything else. That includes the signatures of the transactions concerned, the time in UTC and the wallet address used. A screenshot of the trading interface is no substitute for a transaction signature.
- Expect opportunists. Every larger incident produces pages within hours that promise a refund and ask for a signature or an approval in return. A refund never requires you to approve a transfer of your holdings.
- Use only the route the issuer names itself. The official information is on the provider's site, and only what appears there governs your case.
What our survey does not show
A measurement is worth as much as the statement of its limits. Our query reads the technical state of the mint accounts and nothing else. It says nothing about whether the stated backing actually exists, because that is not on the chain. It says nothing about who owns the authority addresses and how many signatures are needed to use them. For tokens on other chains it does not apply at all; Ethereum and the standards there have their own mechanisms, which carry different names and work in similar ways.
Nor does it check whether a permission has ever been used. For the vast majority of the 32 assets there is no public occasion for that. The measurement answers one question only: whether the possibility exists. For tokenized real-world assets on Solana the answer is yes throughout.
RWA tokens and freeze authority: what to take away
- Check the mint account before you buy. Freeze authority, mint authority and the list of extensions are looked up in two minutes. For anything meant to work without an external permission, self-custody remains the benchmark; which devices are suitable for it is covered in the hardware wallet comparison.
- Pay attention to who holds the permission and who supervises them. With a tokenized security an option to intervene is unavoidable; an unsupervised counterparty is avoidable. Which trading venues are licensed in the EU is shown in the overview of regulated crypto exchanges.
- Document purchase and inflow without gaps. In an unwinding, in a refund and later before the tax office, the documented moment counts, and not your recollection. Suitable tools for that are collected in the overview of crypto tax tools and portfolio trackers.
(As of September 13, 2026. This article is not investment advice. Prices and fee structures change; check the terms with the provider before you buy.)