Deploying Contracts on Base

Prerequisites

1. Configure RPC endpoint (testnet: sepolia.base.org, mainnet: mainnet.base.org)
2. Store private keys in Foundry's encrypted keystore — never commit keys
3. Obtain testnet ETH from CDP faucet (testnet only)
4. Get a BaseScan API key for contract verification

Security

• Never commit private keys to version control — use Foundry's encrypted keystore (cast wallet import)
• Never hardcode API keys in source files — use environment variables or foundry.toml with ${ENV_VAR} references
• Never expose .env files — add .env to .gitignore
• Use production RPC providers (not public endpoints) for mainnet deployments to avoid rate limits and data leaks
• Verify contracts on BaseScan to enable public audit of deployed code

Input Validation