Definition
The key allowed to replace a deployed program’s code. Best practice is to place it in a multisig, put upgrades behind a timelock, or remove it to make the program immutable.
Why it matters
Whoever holds the upgrade authority can change the program’s code, and with it what happens to user funds. It is one of the first things auditors, integrators and careful users check.
What to check
- Confirm the authority on an explorer and check that it is a multisig.
- Decide and publish your upgrade policy before launch.
Related terms
- MultisigA wallet that requires approval from several signers before executing a transaction.
- ProgramSolana’s term for a smart contract: executable code deployed to an account.
- Verifiable buildA reproducible build that lets anyone confirm the program deployed on-chain was compiled from a specific public commit of its source code.
Guides
Get an indicative price range and timeline for auditing your Solana programs, then compare verified auditors.
Estimate your audit cost →