How to Check Solana Program Upgrade Authority

The most direct way to check a Solana program (smart contract) upgrade authority is by using a Solana blockchain explorer (such as Solscan) or the Solana CLI command-line tool. This authority address determines who has the power to modify or close the program, making it a key piece of information for evaluating the security of a Solana project.

OKX Exchange
A leading global cryptocurrency platform,suitable for both beginners and experienced traders.
New user benefit: 20% off trading fees upon registration!！

Register Now App Download

Prerequisites: Understanding What Upgrade Authority Is

On Solana, programs deployed through the BPFLoaderUpgradeab1e loader are upgradeable by default. This means that, with the correct authority, developers can replace the program's code (i.e., BPF bytecode) after deployment.

This authority is controlled by the Upgrade Authority. It holds the superpower to modify the program or even close it to reclaim SOL. If the authority is transferred to a multisig wallet, it means multiple parties must jointly approve any upgrade, which typically enhances security. If the upgrade authority is revoked (set to None), the program becomes permanently immutable and can never be changed or closed.

Steps: How to Check Upgrade Authority

You can query this information through the following three methods:

Method A: Using a Solana Blockchain Explorer (Recommended for Everyone)

This is the most intuitive method and requires no technical background.

1. Open a Solana blockchain explorer, such as Solscan (solscan.io).

2. Enter the Program ID you want to query in the search box and search.

3. Go to the program's detail page. In the "Overview" section at the top of the page, locate the "Upgrade Authority" field.

   • It will display a specific wallet address, or show "Multisig", indicating the authority is controlled by a multisig wallet.

   • Also, check whether the "Upgradeable Status" is "Yes". If it is "No", the program is immutable.

4. Completion Criteria: You can clearly see the "Upgrade Authority" field and its corresponding address or status on the page.

Method B: Using Solana CLI Command-Line Tool (For Developers)

If you have the Solana CLI toolset installed, you can retrieve the program's metadata directly via the command line.

1. Open a terminal and enter the following command:

   solana program show 

2. The system will return information similar to the following, where the Authority line displays the current upgrade authority address.

   Program Id: 7283x8k8fyBcfaFLyPsxbd2VV1AMmZFP7FNoyTXVKJw7
   Owner: BPFLoaderUpgradeab1e11111111111111111111111
   ProgramData Address: Gqn7YQVCP8NtYV1qkEqR4Udhj8EJ3fkikvS7HskCNQ7c
   Authority: 5kh6HxYZiAebF8HWLsUWod2EaQQ6iWHpHYCz8UcmFbM1
   Last Deployed In Slot: 6573
   Data Length: 18504 (0x4848) bytes
   Balance: 0.12999192 SOL

3. Completion Criteria: You have successfully retrieved the program metadata containing the Authority field.

Method C: Programmatic Access via the Anchor Framework (Advanced)

If you are a developer using the Anchor framework, you can obtain the upgrade authority address through Program Derived Addresses (PDA), which is commonly used for permission checks within smart contracts.

Common Failure Causes and Risk Reminders

• Wrong Address Queried: Make sure you are querying the Program ID, not a token's Mint address. Token accounts also have an "Authority" field, but that manages minting or freezing permissions—different from program upgrade authority.

• Don't Confuse "Upgrade Authority" with "Project Security": The upgrade authority being held by the project team means they have the ability to modify the code at any time, introduce vulnerabilities, or even steal user funds. This is a critical factor in assessing a project's decentralization level and risk profile. If a program is upgradeable (i.e., Upgradeable Status is Yes), be sure to pay attention to who its Upgrade Authority is and decide whether you trust that controlling party.

OKX Exchange
A leading global cryptocurrency platform,suitable for both beginners and experienced traders.
New user benefit: 20% off trading fees upon registration!！

Register Now App Download

Confirming Completion

Visit Solscan or use the CLI command to successfully view a program's Upgrade Authority address. You can click on that address to further check if it is a multisig wallet. If it is a multisig, you can continue to view its signer distribution, which helps you more deeply evaluate the program's security model and trust assumptions.