Foundry-based repo for Trillion smart contracts.
Token design for FiatToken contract can be found here.
Install dependencies:
- Setup
asdfto manage runtime versions locally (NodeJS, etc.)
Install Foundry:
curl -L https://foundry.paradigm.xyz | bashInstall the latest versions of Foundry tooling:
Install missing dependencies that are shown in the install output (ex: brew install libusb).
foundryupInstall the Solidity linter (solhint) we use, as a npm dependency:
npm installInstall the Slither static analysis tool (used to find vulnerabilities):
pip3 install slither-analyzerInstall lcov if you want to play with code coverage:
brew install lcovWe use Dependabot for automated dependency updates. Dependabot scans for updates in our dependencies and auto-creates a PR to upgrade the dependency.
This command compiles all the smart contracts.
forge buildThere are a lot of flags you could pass to forge test - but most of the time you'll be running one of these two commands. You should always run forge test before you commit code.
--gas-report gives a breakdown of the deploy cost of a smart contract and the call cost for each function, as long as that function is called in some test somewhere.
NOTE: The function call cost is based on the parameters provided in testing, so its up to you to write tests that are realistic for gas estimation purposes.
forge test
forge test --gas-reportYou can generate a quick coverage summary by running:
forge coverageHowever, you likely may want to filter out "*.s.sol" script contracts and render a nice web UI to examine code coverage, which you can do using the npm script I've written:
NOTE: This requires having
lcovinstalled locally through homebrew.
npm run coverageLike Prettier for Solidity - you should always run this before you commit code.
forge fmtSolhint is a linter for our smart contracts. Run it like so:
npm run lintSlither is a static analysis tool used to find potential smart contract vulnerabilities. Run it like so:
slither .Generates the .gas-snapshot file - by running all the tests and counting how much gas is used by each test. This is very useful for regression testing, refactoring, and optimization - you should always run this before you commit code.
NOTE: This is distinct and different from forge test --gas-report. The gas reporting function in forge test instruments the smart contracts under test and gives you accurate gas usage of the functionality you care about. forge snapshot gives you the gas usage of the tests themselves (not the smart contracts under test) - which means if you do a lot of setup in one of your tests, that gas usage will be included in your .gas-snapshot but it wouldn't show up in forge test --gas-report.
forge snapshotAny smart contracts that need to be used as dependencies (for example, OpenZeppelin) - should be installed using forge install. This will install them as a git submodule.
DO NOT use npm to install smart contracts. The only thing we use npm for is to manage our Solidity linter solhint.
forge installExample of how to deploy a simple contract using a Foundry script.
forge script script/Counter.s.sol:CounterScript --rpc-url <your_rpc_url> --private-key <your_private_key>To deploy FiatToken with a private key, enter the required env vars in .env, then run:
forge script script/DeployFiatToken.s.sol:DeployFiatToken --rpc-url $SEPOLIA_RPC_URL --private-key $PRIVATE_KEY --broadcast --verify --ffi -vvvvTo deploy with hardware wallet:
forge script script/DeployFiatToken.s.sol:DeployFiatToken --rpc-url $SEPOLIA_RPC_URL --ledger --sender $HARDWARE_WALLET_ADDRESS --broadcast --verify --ffi -vvvvIf your contract is upgradeable, you can define a Foundry script to upgrade your contract. You will need to set the address of your proxy contract as an env var and use that in your script.
To upgrade FiatToken with a private key, set the FIAT_TOKEN_PROXY_ADDRESS in .env and update the current (e.g. FiatTokenV1) and new implementation contract name you want to upgrade to (e.g. FiatTokenV2) in script/UpgradeFiateToken.s.sol, and run:
forge script script/UpgradeFiatToken.s.sol:UpgradeFiatToken --rpc-url $SEPOLIA_RPC_URL --private-key $PRIVATE_KEY --broadcast --verify --ffi -vvvvThe private key used needs to belong to the account that has the UPGRADER_ROLE of the contract.
To upgrade with hardware wallet:
forge script script/UpgradeFiatToken.s.sol:UpgradeFiatToken --rpc-url $SEPOLIA_RPC_URL --ledger --hd-paths $DERIVATION_PATH --sender $HARDWARE_WALLET_ADDRESS --broadcast --verify --ffi -vvvvSimilarly, the hardware wallet needs to have the UPGRADER_ROLE of the contract.
Chisel is an advanced Solidity REPL shipped with Foundry. It can be used to quickly test the behavior of Solidity snippets on a local or forked network.
chisel <subcommand>Cast is Foundry's command-line tool for performing Ethereum RPC calls. You can make smart contract calls, send transactions, or retrieve any type of chain data - all from your command-line.
cast <subcommand>Anvil is a local testnet node shipped with Foundry. You can use it for testing your contracts from frontends or for interacting over RPC.
anvil <subcommand>- Foundry documentation: https://book.getfoundry.sh/
- Solhint linter documentation: https://github.com/protofire/solhint
- Slither static analysis documentation: https://github.com/crytic/slither
Foundry tooling has really good help documentation. Some examples:
forge --help
anvil --help
cast --help
chisel --help