Upgradeability
Status. The rename wait is built and tested locally but needs the vault, which is not deployed. A creator picks one of three modes at launch: vault-managed (a change is queued and applies after a wait that anyone can see on-chain, 48 hours by default on the site), instant (the creator's wallet holds the update authority and a change takes effect at once, with no warning), or frozen (nothing can change). Without the vault, only the last two exist. Renaming is done on the manage page.
"Upgradeable token" bundles several different powers. Latch separates them so each can have its own limit.
| Power | Mechanism | Latch default |
|---|---|---|
| Rename, change symbol or image | Mutable metadata, update authority | Creator's choice at launch: a public wait (vault), instant (creator wallet), or frozen |
| Change fee split | Vault parameters | The creator's share may only decrease. They can still re-point it at another wallet. |
| Change anti-sniper schedule | Set once at pool creation | Not changeable (the pool owns it) |
| Change supply | Mint authority | Revoked at launch. Impossible. |
| Remove liquidity | Position lock | Permanently locked. Impossible. |
| Change vault logic | Solana program upgrade authority | Plan: multisig plus timelock, then burn after an audit. Nothing is deployed yet. |
Renaming without a new contract
On Solana the "contract address" of a token is its mint address. The name, symbol and image are not in the mint. They live in a separate metadata account (Metaplex Token Metadata, or the Token-2022 metadata extension). If that account is mutable and you hold its update authority, you can change the fields and nothing else moves: same mint, same holders, same pool. Verified.
Vault-managed mode: at registration the vault checks that it already holds the update authority, so the creator hands it over first and this cannot be undone. The creator calls queue_metadata, the launch's wait passes, and anyone calls apply_metadata, which makes the Metaplex update by CPI. The creator can cancel_metadata while it waits. Wallets and explorers pick up the new data after their caches refresh, which can take minutes to hours.
A creator who wants no changes can pick frozen, which sets the on-chain name, symbol and link immutable. The picture and description live at the link, so they stay changeable unless the link is on IPFS or Arweave.
"Rewrite hook logic, keep the pool"
On Ethereum with Uniswap v4, a pool references a hook contract that runs on swaps, and a launcher can make that hook upgradeable. Solana pools do not call out to arbitrary code. What you can do instead:
- Wrap the pool. Users trade against the DAMM v2 pool directly (via Jupiter or any frontend), so Latch cannot intercept swaps. Logic that matters to Latch lives where Latch has control: fee collection, splitting and claiming, which are all in the vault.
- Upgrade the vault program. Solana programs are deployed upgradeable, and the upgrade authority can replace the code while keeping every account. This is how "rewrite the logic, keep the pool" works here, but it applies to the vault, not to swap behavior.
- Token-2022 transfer hooks. These run on every transfer of a token that enables the extension, and they can approve or reject. They are not swap-specific, they add accounts to every transfer, and many wallets and DEXs handle them poorly. Latch does not use them by default. Using one would let a launch restrict transfers, which is a rug vector, so it should be a visible opt-in if ever offered.
The honest summary: Latch can evolve fee handling and metadata. It cannot change how the pool prices swaps, and it should not claim to.
Guardrails
- Everything queued is public. A queued change is stored in the launch account and logged as an event, and the token page shows it with the time it can apply.
- Timelock on the program too (plan). The vault's upgrade authority would be a multisig behind a delay, so an upgrade is visible before it takes effect. Not deployed.
- A path to immutability. Once the design is stable, burn the upgrade authority. Creators who want an immutable token pick the frozen option from day one.
- Show the powers. The token page lists who holds which authority, including the vault's and Meteora's upgrade authorities. See Verify a token.