Orivions / Blog / Token launch checklist
Solana token launch checklist: authorities, metadata, liquidity and legal
By Orivions Team ·
- Decide the mint and freeze authorities before launch, and make the choice visible on-chain.
- Set metadata (name, symbol, image, links) once, and lock the update authority when it is final.
- Publish supply, allocation and vesting, and hold team and treasury tokens in multisigs or vesting programs.
- Plan liquidity: where, how much, and what happens to the LP position.
- Audit every custom program around the token, and get legal advice for your jurisdictions.
Creating a token on Solana takes minutes. Launching one that buyers, exchanges and wallets trust takes weeks of preparation. Most launch-day problems, such as an active freeze authority, missing metadata or unexplained wallets holding half the supply, are decided long before the token goes live. Work through this checklist in order.
1. Token program and extensions
Choose between the original SPL Token program and Token-2022 (Token Extensions). Token-2022 adds features such as transfer fees, transfer hooks, interest-bearing balances and on-mint metadata. Extensions are powerful, but some wallets, exchanges and DeFi protocols support them only partly, so check that the venues you need accept the extensions you choose. If you do not need an extension, the simpler option is usually the safer one.
2. Authorities
- Mint authority: revoke it for a fixed supply. If you need future minting, keep it under a multisig and publish the schedule.
- Freeze authority: revoke it unless you have a specific compliance reason. Buyers and screening tools often flag an active freeze authority.
- Metadata update authority: keep it while you finalize name, symbol and image, then revoke it or move it to a multisig.
- Extension authorities (Token-2022): fee, hook and other extension authorities need the same treatment. Each one is power someone can still use.
3. Metadata
Name, symbol, decimals, image and links are what wallets and explorers show. Host the image and metadata file on durable storage, keep the symbol short and unique, and test how the token looks in the main wallets before launch. Decimals cannot be changed after the mint is created.
4. Supply, allocation and vesting
- Publish the allocation: how much goes to the team, investors, treasury, community and liquidity.
- Use vesting programs or multisigs: team and investor tokens should not sit in a single wallet one person controls.
- Label the wallets: list the addresses that hold large allocations so holders can follow them.
5. Liquidity
Decide where the token will trade, how much liquidity you will provide, at what starting price, and what happens to the LP position afterwards. Locking or burning LP tokens, or holding them in a multisig with a published policy, tells buyers that liquidity cannot be pulled overnight. Plan for price volatility in the first hours, and avoid launching with very thin liquidity.
6. Audits and security
A plain token created with the standard programs does not need its own audit. Staking, vesting, claim and airdrop programs, bonding curves and launchpads do. Get them reviewed before launch, and run through the Solana pre-launch security checklist. For choosing a reviewer, see how to choose a Solana smart contract auditor.
7. Legal review
Token rules depend on where your team, company and buyers are. A lawyer who works with crypto projects can tell you whether your token or sale could be treated as a regulated product, which countries to restrict, and what your terms and disclosures must say. Do this before you announce a sale date, not after.
8. Launch-day communication
- One official mint address: publish it on your website and social accounts, and warn about fake tokens with the same name.
- A clear launch post: time, venue, supply, authorities, allocation and links to audits.
- Support ready: moderators and answers for the questions everyone will ask in the first hour.
If you are working with an agency on the launch, read how to choose a Solana marketing agency and the red flags when hiring Web3 service providers. Paid promises of listings or guaranteed volume are a warning sign.
Frequently asked questions
Should I revoke the mint authority on my Solana token?
If the supply is meant to be fixed, yes: revoking the mint authority proves no more tokens can be created, and many buyers and listing tools check for it. If you need to mint later, for example for emissions, keep it under a multisig and say so publicly.
What is the freeze authority and should I keep it?
The freeze authority can freeze any token account for that mint. Unless you have a clear compliance reason, revoke it before launch. Many traders and tools treat an active freeze authority as a red flag.
Do I need an audit to launch a token on Solana?
A plain SPL token created with the standard token program does not need its own audit. Any custom program around it, such as staking, vesting, a launchpad or a bonding curve, should be audited before real money touches it.
Need help with your launch?
Describe your token and timeline. Smart Match suggests verified Solana developers, auditors and marketing agencies that fit. Free for teams.
Get matched →Related reading
- Solana pre-launch security checklist: 15 checks before mainnetA practical checklist for launching a Solana program on mainnet: upgrade authority, multisig, verifiable builds, token authorities, monitoring, incident response and the audit.
- Smart contract audit vs bug bounty: which do you need, and when?Audits and bug bounties catch different bugs at different times. How each works on Solana, what they cost, and how to combine them before and after mainnet launch.
- How to read a smart contract audit report (without being an auditor)What the parts of a Solana smart contract audit report mean: scope and commit, severity levels, finding statuses, the fix review, and the questions to ask before you call the code audited.