Solana Token Extensions Guide 2026

Understanding this concept is a prerequisite for making informed decisions in DeFi. Most losses in crypto come from misunderstanding the fundamentals.

Key Insight

Token-2022 differs from SPL Token the same way Ethereum's ERC-20 with custom logic differs from a bare ERC-20. Every token operation—mint, transfer, burn, freeze—works identically but with optional extension hooks that add functionality at the protocol layer. This keeps Solana's security model intact while enabling features that would require smart contracts elsewhere.

Confidential Transfers

Uses Twisted ElGamal encryption with zero-knowledge proofs to hide transfer amounts while keeping account addresses public. Accounts must be explicitly configured for confidential mode. When moving tokens into confidential mode, users deposit from a regular account. The pending balance must be applied before spending confidential tokens. Currently, confidential transfers are incompatible with transfer hooks.

Use case: Privacy-preserving stablecoins, confidential payment channels, corporate treasury transfers where amounts are sensitive.

Transfer Fees

The token issuer defines a fee (in basis points, e.g., 50 bps = 0.5%) plus an optional maximum fee cap (e.g., max 1 SOL). On every transfer, the fee is collected automatically and directed to a fee account. The receiver gets the net amount; the issuer receives the difference. No wrapper or secondary mechanism needed.

Use case: Protocol revenue, stablecoin seigniorage, token-based fees without liquidity pools.

Interest-Bearing Tokens

Display balance increases over time as if accruing interest, without minting new tokens. The mint authority sets an interest rate; the token account's display balance grows visually. Internally, the balance is stored as a fixed amount multiplied by an interest index. No token inflation occurs; only the accounting changes.

Use case: Yield-bearing stablecoins, savings accounts, fixed-income tokens.

Permanent Delegate

A designated authority can transfer or burn tokens from any account without the owner's permission. This is a centralized control mechanism useful for regulated stablecoins (like PayPal's PYUSD), where issuers must comply with sanctions lists, frozen accounts, or account recovery. The permanent delegate can act unilaterally.

Use case: Regulated stablecoins, compliance-heavy tokens, account recovery systems.

Transfer Hooks

Execute custom on-chain logic on every transfer (e.g., royalty payments, allowlist checks, compliance verifications). The hook is a separate program that gets invoked via CPI during the transfer. Note: currently incompatible with confidential transfers and add compute overhead.

Use case: Royalty-enforced NFTs, KYC-gated tokens, allowlist enforcement.

Non-Transferable Tokens (Soulbound)

Tokens that cannot be transferred after minting. Once issued to an account, they are locked to that account permanently. A Solana native soulbound token implementation.

Use case: Credentials, certificates, membership tokens, non-transferable achievements.

Default Account State

All new token accounts start frozen by default. Users must be explicitly unfrozen by the freeze authority before they can transfer tokens. Useful for KYC-gated tokens where accounts are only unfrozen after identity verification.

Use case: KYC enforcement, regulated tokens, step-by-step account activation.

CPI Guard

Prevents certain cross-program invocation (CPI) attacks by restricting which programs can invoke token operations. A security extension that limits the surface area for exploits.

Use case: Security hardening, protecting against malicious dApps.

Metadata Pointer

Stores token metadata (name, symbol, URI, decimals) directly on the mint account instead of requiring a separate Metaplex metadata account. Reduces account overhead and simplifies token creation.

Use case: Any Token-2022 token that needs standard metadata without external accounts.

Regulated Stablecoins: PayPal's PYUSD

PayPal's USD stablecoin (PYUSD) uses Token-2022 with permanent delegate and transfer fees. This lets PayPal comply with sanctions lists (via the permanent delegate) and collect protocol fees. Transfer fees are set to 0 for retail users on most platforms but enable revenue options for future monetization.

Privacy-Preserving Payments

Privacy coins and payment protocols use confidential transfers to hide transaction amounts. Amounts are encrypted on-chain, and zero-knowledge proofs verify transfers are valid without revealing the amount moved.

Yield-Bearing Tokens

Crypto savings products use interest-bearing tokens to accrue interest visually without mint inflation. A user's balance grows over time as the interest index increases, enabling passive yields without token dilution.

Tokenized Securities

RWA (Real-World Asset) tokens on Solana use default account state (KYC gating) and transfer hooks to enforce compliance. Only verified accounts can hold these tokens, and transfers are logged for audit trails.

Royalty-Enforced NFTs

NFT collections with enforced royalties use transfer hooks to pay creators on secondary sales. Every transfer triggers a royalty payment without requiring marketplace coordination.

Confidential Transfer ZK ElGamal Program Disabled

The zero-knowledge proof program powering confidential transfers was temporarily disabled on mainnet for additional security review (as of late 2025). It remains available on testnet and Devnet. Confidential transfer functionality may be re-enabled after audit completion.

Wallet & DEX Support Varies

Most modern Solana wallets support Token-2022 for basic transfers, but support for advanced extensions is inconsistent. Confidential transfers, transfer hooks, and interest-bearing tokens may not render or function correctly in all wallets. Always verify compatibility before holding Token-2022 tokens with specialized extensions.

Transfer Hooks Increase Compute Cost

Transfers that invoke custom hook logic consume additional compute units. If the hook program uses high compute, transfers may fail or be slow. Complex hooks can bottleneck high-volume trading.

Confidential Transfers + Transfer Hooks Incompatibility

These two extensions currently cannot be used together. A token cannot have both confidential transfers and custom transfer hook logic simultaneously. This limits privacy use cases that also require compliance hooks.

Permanent Delegate = Centralized Control

Tokens with permanent delegates give the issuer unilateral control to freeze or burn any account's tokens. While necessary for regulation, this concentrates control and reduces holder autonomy. Evaluate the issuer before holding such tokens.

Which extensions are enabled?

Use on-chain tools to inspect the mint account and see which extensions are active. Understand the implications of each one. A permanent delegate adds centralized control; confidential transfers improve privacy but reduce wallet compatibility.

Who controls the critical authorities?

Check who owns the mint authority, freeze authority, and permanent delegate. Is the authority held by a multisig? A DAO? Or a centralized issuer? Decentralized authorities are lower-risk.

Has the token been audited?

Token-2022 itself was audited by Halborn, but individual transfer hooks and custom logic should have separate audits. Ask for audit reports before trusting critical extensions.

What is the wallet support surface?

Test the token in your primary wallet. Can you see the balance? Can you transfer it? Does it render correctly? If the token uses exotic extensions, verify it works in your preferred wallet before holding significant amounts.

Are extension details documented?

Reputable projects publicly document which extensions they use and why. If documentation is vague or missing, be cautious. You need to understand what you're holding.