What issuer-controlled means on a Solana token

November 9, 2026 · 8 min read · by the Rugsight team

Paste a well-known Solana stablecoin into a rug checker and you may see the same red flags you would on a fresh meme coin: mint authority active, freeze authority active, maybe a Token-2022 permanent delegate. On an anonymous launch those are stop signs. On USDC they are how the product works. This guide explains the difference, what Rugsight's grade IC (issuer-controlled) means, how we decide to apply it, and what it does not certify.

For the authority fields themselves, start with how to check mint and freeze authority and what "mint authority renounced" means. For Token-2022 extras such as a permanent delegate or pause, see the Token-2022 guide. For the full checklist, see how to check a Solana token for rug-pull risk.

What "issuer-controlled" means here

Some Solana tokens are meant to stay under a named issuer's control:

• A fiat-backed stablecoin has to mint when dollars come in and burn when they are redeemed. A permanently fixed supply would break that.
• A regulated issuer is typically expected to be able to freeze (and sometimes move or burn) balances tied to sanctions or court orders. On Solana that usually means a live freeze authority, and on Token-2022 sometimes a permanent delegate or pause authority.
• Wrapped assets and tokenized stocks are claims on something the issuer holds. The issuer keeps the keys that mint, redeem and, if required, restrict transfers.

Those powers are real. They are counterparty risk: you are trusting the issuer and the legal framework around it, not a "renounced" meme-coin setup. They are not, by themselves, the same pattern as a deployer who kept freeze authority on a nameless coin so buyers cannot sell.

Rugsight therefore does not give USDC a failing letter grade just because mint and freeze are active. If the mint is on a small allowlist and every live authority still matches the issuer addresses we pinned, the public grade is IC instead of A–F. The underlying technical score is still calculated, and still deducts for those controls; it is shown as technicalGrade / the numeric score so the controls stay visible.

How Rugsight decides (and when the label drops)

The match is strict on purpose:

1. Mint address only — never the name or ticker. A copycat called "USD Coin" does not inherit the label.
2. Pinned authorities — mint authority, freeze authority, and (on Token-2022) a permanent delegate must each be empty or one of the issuer addresses we recorded for that mint.
3. If any live authority moves to an unknown address, the IC label is dropped and the token is graded like any other, with those flags counting against the letter grade.

The allowlist is short (68 mints at the time of writing): notable stablecoins, some wrapped assets, and tokenized stocks such as xStocks. It is not a ranking, a reserve audit, or a claim that the issuer is "safe". Tokens not on the list are never called issuer-controlled, even if they have a website and a live mint authority.

How to check this yourself

1. Copy the full mint from a source you already trust, not a reply or a ticker search (verify the contract address).
2. Open the mint on an explorer. Read mint authority, freeze authority, the token program, and any Token-2022 extensions.
3. Ask who holds those keys. A published issuer multisig is a different fact from a fresh wallet that created a meme coin an hour ago.
4. Paste the same mint into Rugsight. If we recognise it, you will see grade IC, the issuer name, the asset type (stablecoin, wrapped asset, or tokenized stock), the flags for every live control, and the technical score those flags produced.

An IC result is a classification, not a pass. You still have issuer risk, and you still have every other check (holders, liquidity, sellability) to read in context.

Live examples (verified 2026-11-09, re-checked 2026-11-10)

These numbers come from Rugsight's own free score (and, where noted, the holder preview on the token page). The BONK contrast was re-checked on 10 November 2026 at 23:18 America/Fortaleza. They will change; open the linked token page for the live figure.

Allowlisted assets — grade IC, technical score still counts the controls:

USDT (Es9vMFrzaCERmJfrF4H2FYD4KCoNkY11McCe8BenwNYB) looks like USDC on this check: grade IC, score 50, technical grade C, issuer Tether, mint and freeze active, holders not checked. USDG (2u1tszSeqZ3qBWF3uNGPFc8TzMk2tdiwknnRMWGWjGWH) is IC with technical score 0 (F): Paxos (Global Dollar Network) holds mint, freeze and a permanent delegate, with TOP10_HIGH and TOP1_LARGE. You can also put two of these side by side at USDC vs PYUSD.

A technical score of 0 on PYUSD is easy to misread. The letter would have been F if we treated it like a meme coin. The grade is IC because those controls (and the concentrated treasury-style holdings) are expected for that product, not hidden. It does not mean the reserves were audited here, or that a large holder cannot sell.

Contrast — same kinds of flags, no IC label:

• BONK (DezXAZ8z7PnrnRJjz3wXBoRgixCa6xjnB7YaB1pPB263): grade B, score 82 (free check, as of 10 November 2026, 23:18 America/Fortaleza). Mint and freeze are revoked. Flags: TOP10_ELEVATED and TOP1_LARGE. This is the usual memecoin shape: no issuer, no live mint authority, a letter grade. (Earlier on 10 November it was A / 90 with only TOP10_ELEVATED.)
• A same-ticker "Bonk" copycat (BonkUg9t46HnxF4erZzmnB4Ae6oEcDS4V66zqUoUhwWY): grade C, score 55, issuerControlled: false. Flags: FREEZE_AUTHORITY_ACTIVE, TOP1_WHALE, TOP10_ELEVATED. It is not on the allowlist, so an active freeze authority is scored as a sellability risk, not as an issuer control. See how to verify a Solana token contract address and the honeypot / can-you-sell guide.

What Rugsight shows

On the free check:

• grade IC when the mint and live authorities match the allowlist, otherwise a letter grade;
• issuerControlled, the issuer name and asset type;
• the technical score and technicalGrade (the A–F the same flags would have produced);
• the usual flags: MINT_AUTHORITY_ACTIVE, FREEZE_AUTHORITY_ACTIVE, Token-2022 extensions, holder concentration when it can be measured.

The paid report (1 USDC for people, or 0.03 USDC per call for agents via x402) adds the top-20 holder table, authority addresses, LP and market detail, and each flag explained. The free BONK sample shows the layout for a non-IC token.

Limits, stated plainly:

• IC is not a statement that the issuer is solvent, that reserves are full, or that you should hold the asset.
• The allowlist can be wrong or incomplete. A legitimate issuer-style token we have not listed still gets a letter grade.
• If holders cannot be ranked (as with USDC and USDT on this check: HOLDERS_UNAVAILABLE), treat concentration as unknown, not as "fine".
• IC says nothing about whether you can sell if the issuer later uses freeze or a delegate. That power is the point of the design.

Warning signs, summarised

FAQ

What does grade IC mean on Rugsight?

IC means issuer-controlled. The mint is on Rugsight's allowlist and every live mint, freeze and (if present) permanent-delegate authority still matches the issuer addresses we pinned. The public grade is IC instead of A–F. The numeric score and technicalGrade still reflect those controls.

Why does USDC have mint and freeze authority?

USD Coin on Solana (EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v) is a fiat-backed stablecoin. Circle keeps mint authority so supply can move as dollars are issued and redeemed, and freeze authority for compliance. On our 2026-11-09 check the grade was IC, the technical score was 50 (C), and both authorities were held by a Circle multisig (2 of 4 signers). That is issuer risk, not a "renounced" memecoin setup.

Is an issuer-controlled token safe to hold?

No checker, including Rugsight, can answer that. IC does not audit reserves, legal structure or price stability. It only says the on-chain controls match a known issuer pattern rather than an anonymous deployer. You can still lose money through issuer, market or operational risk.

How does Rugsight choose which tokens get grade IC?

By mint address and pinned authority addresses only, never by name or symbol. There were 68 allowlisted mints when this was written (stablecoins, some wrapped assets, tokenized stocks). If a live authority moves to an address we did not pin, the IC label is removed and a letter grade is used.

What if a copycat uses the same name as a stablecoin?

It is scored like any other mint. A same-ticker "Bonk" we checked on 2026-11-09 (BonkUg9t46HnxF4erZzmnB4Ae6oEcDS4V66zqUoUhwWY) was grade C, score 55, with freeze authority still active and issuerControlled: false. Always compare the full mint, not the ticker.

Summary

Active mint or freeze authority is a fact, not a verdict. On a known issuer mint it is usually how the asset is designed; on a nameless launch it is a reason to walk away. Rugsight's grade IC marks the first case without hiding the technical score. Paste the mint into Rugsight, read the issuer line and the flags together, and use the full checklist for everything IC does not cover.

Rugsight is an automated technical tool. Nothing here is financial advice.