token-authority-and-risk

To audit SPL token authorities, inventory current mint, freeze, and close custody methods using spl-token account-info and on-chain explorers to clarify control and identify governance risk for token projects.

Rotating SPL token mint authority to a multisig involves deciding your custody posture, then executing the transfer using the spl-token authorize command and recording the resulting transaction hash for disclosure.

Document on-chain disclosures by recording all transaction hashes from authority changes and publishing authority logs, enabling public verification and compliance for token project transparency.

Yes, you can revoke freeze authority independently by executing spl-token authorize for the freeze account specifically, maintaining mint authority while adjusting governance posture to reduce risk.

Yes, the process applies to SPL tokens using PDA custody strategies by inventorying current authorities and proposing posture options like rotating to a PDA or multisig to improve governance control.

Monitoring SPL token authority changes after a security audit is necessary to detect unauthorized modifications and large mint or burn events, ensuring ongoing token governance compliance and risk control.