POC for a Hardhat project!!

[0xnayan]

For competitive audit, if the protocol is using hardhat and test is written in javascript now for Proof of Code can I submit a test using foundry or I have to do that in javascript??

[johnsonstephan]

Hi @0xnayan, you raise an important question! This tends to be a puzzling area for some auditors.

TL;DR: The answer is yes, you can.

Let’s get into more detail

In a competitive audit, if a protocol uses Hardhat with JavaScript tests, you may in fact submit a PoC using Foundry.

For example, this approach was successfully taken in the competitive audit for ENS on Code4rena (C4).

• In the C4 ENS audit report, a PoC for finding M-01 was submitted and credited using Foundry -- even though ENS uses Hardhat, as noted in their C4 ENS repo.
• The audit report even highlights a "practical step" of converting the Hardhat tests into a Foundry environment in Section 2.2.

Tip

However, it's important to review the guidelines of any audits you participate in, to ensure there are no restrictions on your choice of framework.

Bonus Information

1. Considerations: When deciding between the two, a key factor is that Foundry allows you to write your tests in Solidity, which will usually align with the development language of the protocol. Other advantages of Foundry include faster test and script execution, native fuzz testing capabilities, and “cheat codes” for state manipulation.
2. Resource: Additionally, you may find @PatrickAlphaC's hilarious 1-minute clip on using Foundry useful (and extremely entertaining).

Does all of that make sense?

[0xnayan]

Thank you @johnsonstephan 🙏

[johnsonstephan]

@0xnayan No problem, happy to help!