Reinforced Hardhat Plugin

This plugin integrates Reinforced-powered smart contract security reviews into the Hardhat workflow. It enables both automatic and manual security scans of Solidity contracts before deployment, leveraging decentralized intelligence for vulnerability detection and remediation suggestions. The plugin provides tasks for scanning all contracts and formatting the results for easy review.

Features

• Automatic scanning after compilation
• Manual scanning task (npx hardhat scan)
• Integration with the Reinforced API for contract analysis
• Tabular vulnerability reports

Usage

1. Install the plugin and configure your Reinforced API key in hardhat.config.js.
2. Run npx hardhat scan to manually scan contracts.
3. Security reviews are also performed automatically before deployment.

Configuration

Add the following to your hardhat.config.js to enable the plugin:

module.exports = {
  // ...existing config...
  reinforced: {
    compilationHookEnabled: true, // Set to true to enable automatic scanning
    apiKey: "YOUR_REINFORCED_API_KEY" // Your Reinforced API key
  }
};

• compilationHookEnabled (boolean): Enables or disables automatic Reinforced security reviews before deployment. The manual scan task always works regardless of this flag.
• apiKey (string): Your API key for accessing Reinforced's security review service.