Permanent Delegate: the most powerful (and misunderstood) Token-2022 extension

Permanent Delegate is the most consequential of Token-2022's extensions. Understanding it fully — both its legitimate uses and its abuse potential — is essential before deploying any token that includes it.

What Permanent Delegate actually does

The PermanentDelegate extension designates a single public key as the permanent delegate for the entire mint. This delegate can:

• Transfer tokens from any holder's account to any destination — without the holder's signature
• Burn tokens from any holder's account — without the holder's signature

This authority is encoded in the mint at creation and cannot be changed, transferred, or revoked after the fact. There is no mechanism to remove or rotate the permanent delegate once the mint is live.

Legitimate use cases

Despite the power this extension grants, there are genuine, non-malicious use cases:

• Regulatory compliance — financial institutions issuing tokenised securities may have legal obligations to freeze or reclaim assets from sanctioned addresses
• Stablecoin issuers — OFAC compliance requires the ability to freeze assets associated with prohibited entities
• Subscription services — tokens representing a subscription can be automatically burned when the subscription expires
• In-game economies — game operators may need to reclaim tokens from banned accounts
• Enterprise token programmes — employee equity tokens that should be clawed back under certain contractual conditions

The risks — be honest with your holders

Any holder of a Permanent Delegate token should understand they are holding something that can be taken from them at any time by the delegate address. This is not a hypothetical — it is a guaranteed on-chain capability.

If you deploy a Permanent Delegate token, you have a responsibility to:

• Disclose this clearly in your token's documentation and marketing
• Assign the delegate address to a multisig or DAO — not a single hot wallet
• Define in writing the circumstances under which the authority will be exercised
• Consider legal implications in your jurisdiction (particularly for securities-adjacent tokens)

Deploy with Smeltr — the acknowledgement gate

Smeltr requires a mandatory acknowledgement checkbox before any deployment including Permanent Delegate can proceed. The confirmation is re-checked in the transaction builder as a defence-in-depth measure — the UI cannot bypass it.

1. Go to smeltr.org/deploy.
2. Toggle on Permanent Delegate and enter the delegate address (recommend a multisig, not your hot wallet).
3. In the Review panel, check the acknowledgement confirming you understand the implications.
4. Sign and deploy.