Hardhat Multi-Deploy: Automate Smart Contract Deployment

We design and develop full-cycle blockchain solutions: from smart contract architecture to launching DeFi protocols, NFT marketplaces and crypto exchanges. Security audits, tokenomics, integration with existing infrastructure.
Showing 1 of 1All 1305 services
Hardhat Multi-Deploy: Automate Smart Contract Deployment
Simple
from 1 day to 3 days
Frequently Asked Questions

Blockchain Development Services

Blockchain Development Stages

Latest works

  • image_website-b2b-advance_0.webp
    B2B ADVANCE company website development
    1357
  • image_web-applications_feedme_466_0.webp
    Development of a web application for FEEDME
    1250
  • image_websites_belfingroup_462_0.webp
    Website development for BELFINGROUP
    956
  • image_ecommerce_furnoro_435_0.webp
    Development of an online store for the company FURNORO
    1188
  • image_logo-advance_0.webp
    B2B Advance company logo design
    646
  • image_crm_enviok_479_0.webp
    Development of a web application for Enviok
    929

Hardhat Multi-Deploy: Automate Smart Contract Deployment Across 10+ Networks

We frequently see projects outgrow a single network. Deploying on Polygon is fine, on Arbitrum it becomes a script-monster. With eight networks and ten contracts, each requiring source verification on block explorers, it turns into a nightmare. Our approach uses the hardhat-deploy plugin, making deployment declarative, idempotent, and automated. Our team has 10+ years of Web3 experience and has deployed 50+ protocols on Ethereum, Polygon, Arbitrum, Optimism, and Base.

On one project with 6 contracts and 8 networks, we implemented hardhat-deploy and cut deployment time from 2 days to 2 hours, reducing gas costs by 25% through custom optimizer runs per network. Some contracts saw 40% savings.

Why Standard Hardhat Deploy Falls Short

The basic approach npx hardhat run scripts/deploy.ts is an imperative stateless script. It doesn't track what’s already deployed, offers no idempotency, and re-running creates a second contract instance. Addresses are not saved automatically.

Recently, on a project with 5 networks, we spent 2 days manually verifying each contract on block explorers. After implementing hardhat-deploy, that process took 1 hour. Gas optimization via per-network optimizer runs saved up to 30%.

hardhat-deploy adds:

  • Deployment tracking – JSON files in deployments/<network>/ with address, ABI, bytecode, transaction hash
  • Idempotency – re-run skips if contract exists and unchanged
  • Named accounts – namedAccounts config for readability
  • Fixtures for tests – deployments available in tests via getNamedAccounts

The hardhat-deploy documentation recommends using tags and dependencies to manage deployment order.

Comparison:

Feature Standard Deploy hardhat-deploy
Idempotency No Yes
Address storage Manual Automatic JSON
Verification Separate script Built-in
Multi-chain Multiple scripts Single config

Why hardhat-deploy Beats Manual Scripts

The plugin stores the bytecode hash and constructor arguments for each deployment. On re-run, it checks if the contract changed; if not, it skips. This allows safe deployment to 10 networks without duplication risk. If the code changes, it auto-deploys the new version while keeping old addresses accessible. Error handling prevents duplicate contracts, saving up to 30% in gas on each re-deployment.

Multi-chain Configuration

// hardhat.config.ts
import { HardhatUserConfig } from "hardhat/config";
import "@nomicfoundation/hardhat-toolbox";
import "hardhat-deploy";

const config: HardhatUserConfig = {
  solidity: {
    version: "0.8.24",
    settings: {
      optimizer: { enabled: true, runs: 200 },
      viaIR: false,
    },
  },
  
  namedAccounts: {
    deployer: {
      default: 0,
      mainnet: "0x...",
    },
    treasury: {
      default: 1,
      mainnet: "0x...",
    },
  },
  
  networks: {
    mainnet:  { url: process.env.MAINNET_RPC,  accounts: [process.env.DEPLOYER_KEY!], chainId: 1 },
    polygon:  { url: process.env.POLYGON_RPC,  accounts: [process.env.DEPLOYER_KEY!], chainId: 137 },
    arbitrum: { url: process.env.ARBITRUM_RPC, accounts: [process.env.DEPLOYER_KEY!], chainId: 42161 },
    optimism: { url: process.env.OPTIMISM_RPC, accounts: [process.env.DEPLOYER_KEY!], chainId: 10 },
    base:     { url: process.env.BASE_RPC,     accounts: [process.env.DEPLOYER_KEY!], chainId: 8453 },
  },
  
  etherscan: {
    apiKey: {
      mainnet:        process.env.ETHERSCAN_KEY!,
      polygon:        process.env.POLYGONSCAN_KEY!,
      arbitrumOne:    process.env.ARBISCAN_KEY!,
      optimisticEthereum: process.env.OPTIMISM_KEY!,
      base:           process.env.BASESCAN_KEY!,
    },
  },
};

Deploy Scripts with hardhat-deploy

// deploy/001_deploy_token.ts
import { HardhatRuntimeEnvironment } from "hardhat/types";
import { DeployFunction } from "hardhat-deploy/types";

const func: DeployFunction = async (hre: HardhatRuntimeEnvironment) => {
  const { deployments, getNamedAccounts, network } = hre;
  const { deploy } = deployments;
  const { deployer, treasury } = await getNamedAccounts();

  const token = await deploy("MyToken", {
    from: deployer,
    args: [treasury, "1000000000000000000000000"],
    log: true,
    autoMine: true,
    waitConfirmations: network.name === "mainnet" ? 5 : 1,
  });

  if (network.name !== "hardhat" && network.name !== "localhost") {
    await hre.run("verify:verify", {
      address: token.address,
      constructorArguments: [treasury, "1000000000000000000000000"],
    });
  }
};

func.tags = ["Token", "all"];
func.dependencies = [];
export default func;
// deploy/002_deploy_staking.ts
const func: DeployFunction = async (hre: HardhatRuntimeEnvironment) => {
  const { deployments, getNamedAccounts } = hre;
  const { deploy, get } = deployments;
  const { deployer } = await getNamedAccounts();

  const token = await get("MyToken");

  await deploy("StakingContract", {
    from: deployer,
    args: [token.address],
    log: true,
  });
};

func.tags = ["Staking", "all"];
func.dependencies = ["Token"];
export default func;

Execution order is managed via tags and dependencies. hardhat-deploy builds a dependency graph and deploys in the correct order.

Parallel Deployment to Five Networks?

# Single network
npx hardhat deploy --network polygon

# Multiple networks via script
for network in mainnet polygon arbitrum optimism base; do
  npx hardhat deploy --network $network --tags all
done

For parallel deployment:

#!/bin/bash
networks=("polygon" "arbitrum" "optimism" "base")
pids=()

for network in "${networks[@]}"; do
  npx hardhat deploy --network $network --tags all &
  pids+=($!)
done

for pid in "${pids[@]}"; do
  wait $pid || exit 1
done

echo "All deployments complete"

Deploy mainnet separately, manually, after verifying on all testnets.

Address Storage and Export

After deployment, hardhat-deploy creates files in deployments/polygon/MyToken.json with address and ABI. For the frontend, export to a unified config:

// scripts/export-addresses.ts
import { deployments } from "hardhat";

const networks = ["mainnet", "polygon", "arbitrum", "optimism", "base"];
const contracts = ["MyToken", "StakingContract"];

const config: Record<string, Record<string, string>> = {};

for (const network of networks) {
  config[network] = {};
  for (const contract of contracts) {
    try {
      const deployment = await deployments.get(contract);
      config[network][contract] = deployment.address;
    } catch {
      // contract not deployed on this network
    }
  }
}

fs.writeFileSync("src/contracts/addresses.json", JSON.stringify(config, null, 2));

CI/CD Integration

GitHub Actions for automatic deployment on merge to main:

# .github/workflows/deploy.yml
name: Deploy Contracts

on:
  push:
    branches: [main]
    paths: ["contracts/**", "deploy/**"]

jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      
      - uses: actions/setup-node@v4
        with:
          node-version: "20"
          cache: "npm"
      
      - run: npm ci
      
      - name: Deploy to testnets
        env:
          DEPLOYER_KEY: ${{ secrets.DEPLOYER_KEY }}
          POLYGON_RPC: ${{ secrets.POLYGON_MUMBAI_RPC }}
        run: npx hardhat deploy --network polygonMumbai --tags all
      
      - name: Commit updated deployments
        run: |
          git config user.name "GitHub Actions"
          git config user.email "[email protected]"
          git add deployments/
          git commit -m "chore: update deployment artifacts" || echo "No changes"
          git push

Deployment artifacts are committed back to the repository — addresses are always up-to-date and versioned.

What’s Included in Multi-Chain Deployment Setup?

We provide:

  • Complete hardhat.config.ts for 5+ networks with gas optimization
  • Deploy scripts with idempotency and automatic verification
  • CI/CD integration (GitHub Actions / GitLab CI)
  • Documentation for deployment management
  • 30-day post-delivery support
Pre-Deployment Checklist
  • Verify RPC endpoints and API keys
  • Ensure deployer wallet has sufficient balance
  • Test on local network (hardhat)
  • Run deployment on testnets (Goerli, Mumbai, Sepolia)
  • Verify contracts on block explorer
  • Run parallel deployment to all target networks

Setup timeline for a full multi-chain deployment pipeline: 1–3 days, depending on the number of networks and CI/CD requirements. We guarantee idempotency and reproducible deployments. Our engineers are certified in Solidity and have worked with protocols totaling over $1B in TVL. Contact us to assess your project and get a consultation on setting up a multi-chain pipeline.

Smart Contract Development

We faced a situation: a contract was deployed, two weeks later a message arrives—the pool drained for $800k. Looked at the transaction in Tenderly: attacker called deposit(), inside an ERC-777 callback re-called withdraw()—balance only updated after the second exit. Classic reentrancy, but not via ETH transfer—through an ERC-777 hook. ReentrancyGuard was only on withdraw().

Such cases are not rare. A smart contract is financial logic with no possibility to patch it overnight. Our team develops turnkey contracts, embedding protection against reentrancy, MEV, and gas attacks from the early stages.

How We Develop Smart Contracts Turnkey

We start with business logic audit and stack selection. Solidity 0.8.x is the standard for EVM-compatible chains: Ethereum, Arbitrum, Optimism, Polygon, BSC, Avalanche C-Chain. For Solana, we use Rust and Anchor: the account and program model requires explicit declaration of all resources. For projects requiring formal verification, Move (Aptos, Sui) fits—linear types eliminate resource copying at the compiler level. Vyper is chosen for contracts where audit simplicity is critical (Curve Finance).

Language Execution Model Typical Domain Risks
Solidity 0.8.x EVM, sequential DeFi, NFT, tokens Reentrancy, overflow (unchecked)
Rust (Anchor) Solana, parallel High-throughput DEX, games Incorrect account declaration
Move Aptos/Sui, resource Large protocols Ecosystem complexity
Vyper EVM, limited syntax Critical contracts (Curve) Compiler stability dependency

Gas optimization is not premature optimization—it is an architectural decision. On Ethereum mainnet, deploying a poorly designed contract can cost a significant amount of ETH due to suboptimal storage layout. Repacking a Proposal structure from 7 slots to 4 saved thousands of gas per vote—substantial savings when scaled across thousands of votes per day.

Typical gas mistakes: passing arrays via memory instead of calldata in external functions (2–3x more expensive); using require with long strings instead of custom errors like error InsufficientBalance(...). Custom errors are cheaper on revert and pass structured data to the frontend.

Why Smart Contract Audit Is Critical for Security

Audit is not a one-time check—it is a built-in development stage. We use three levels:

  1. Static analysisSlither (30 seconds in CI) detects reentrancy, uninitialized variables, dangerous delegatecall.
  2. Fuzzing and invariant testsFoundry with --fuzz-runs 50000 finds edge cases missed by hundreds of unit tests. Real case: an AMM contract with custom math passed 150 Hardhat tests; Foundry found an integer division truncation that allowed a dust attack to accumulate dust on the contract. Echidna checks invariants ("sum of all balances ≤ totalSupply").
  3. Manual code review—our engineers with 10+ years in blockchain identify logic errors that tools miss. For protocols with TVL > $1M, external audit from Trail of Bits, Consensys Diligence, or OpenZeppelin is mandatory. Timeline: 2–4 weeks.

Any upgradeable protocol must have a timelock. TimelockController from OpenZeppelin: operation proposed → wait minimum delay (48–72 hours) → executed. Without timelock, one compromised deployer wallet means losing the entire pool.

What Upgrade Patterns Do We Choose?

Pattern Mechanism Risk When to Use Our Experience
Transparent Proxy (OZ) admin vs user separation Storage collision, centralization Standard projects 15+ implementations
UUPS Upgrade logic in implementation Forget _authorizeUpgrade → contract permanently broken Gas-optimized projects 7 projects
Diamond (EIP-2535) Multiple facets Audit complexity Large protocols with 10+ contracts 3 deployments
Beacon Proxy One beacon for multiple proxies Beacon = single point of failure Factories of identical contracts 5 factories

Storage collision is the main danger of proxies. Implementation v2 must not add variables before existing ones. OpenZeppelin Upgrades plugin for Hardhat and Foundry checks this automatically, but only when using its API.

How to Protect a Contract from MEV and Front-Running

On Ethereum mainnet, transactions in the mempool are visible to all. MEV bots execute sandwich attacks on DEX, front-run mints and governance. Solution: commit-reveal scheme for auctions, private submission via Flashbots PROTECT RPC. EIP-7702 and PBS (proposer-builder separation) are changing the landscape but not yet widespread.

What Is the Development Process?

  1. Analysis—functional specification, call diagram, edge case analysis. Without this, coding starts in vain.
  2. Development—Solidity/Rust with tests in parallel. Test → code → refactoring. Use Foundry for fuzz and invariant tests.
  3. Internal audit—Slither + Echidna + manual code review. Foundry invariant tests for protocol invariants.
  4. External audit—for projects with real money. Timeline: 2–4 weeks.
  5. Deployment—Foundry scripts or Hardhat Ignition with verification on Etherscan. Gnosis Safe for ownership transfer immediately after deployment.
  6. Monitoring—Tenderly alerts, OpenZeppelin Defender, Forta Network.

What Is Included

  • Architecture documentation and contract specification (NatSpec).
  • Source code with repository and CI (Slither, Foundry, coverage).
  • Deployed contract with verification on blockchain explorer.
  • Audit results (internal and external upon request).
  • Access to monitoring and management (Gnosis Safe).
  • Code warranty: critical bug fixes within one month after deployment.
  • Consultation on web integration (wagmi, RainbowKit).

Estimated Timelines

  • ERC-20 token with basic functions: 1–2 weeks
  • Vesting contract with cliff/linear schedule: 2–3 weeks
  • NFT ERC-721/1155 with marketplace: 4–6 weeks
  • AMM or lending protocol: 2–4 months
  • Multichain protocol with bridge: 4–7 months

Audit adds 3–6 weeks and runs in parallel with final testing where possible. Cost is calculated individually—contact us for a free project evaluation.

Order smart contract development—get consultation on architecture and protection against reentrancy, MEV, and gas attacks. Want to discuss details? Write to us—we will select the optimal stack for your task.