Upgradable Smart Contracts

• Always use the upgradeable versions of OpenZeppelin contracts
• Keep storage variables in the same order across upgrades
• Never remove or reorder storage variables
• Use the initializer modifier to prevent multiple initializations
• Initialize all inherited contracts in the initialize() function
• Test upgrades thoroughly before deploying to mainnet
• Consider using a timelock for upgrade transactions
• Document all storage variables and their purposes

• Modifying storage variable order or types
• Forgetting to initialize inherited contracts
• Using constructors instead of initialize()
• Not considering storage collision risks
• Missing access control on upgrade functions
• Insufficient testing of upgrade paths

Deployment Script

const { ethers, upgrades } = require("hardhat");

async function main() {
  // Deploy MyTokenUpgradeable
  const MyTokenUpgradeable = await ethers.getContractFactory("MyTokenUpgradeable");
  console.log("Deploying MyTokenUpgradeable...");
  const myToken = await upgrades.deployProxy(MyTokenUpgradeable, [], {
    initializer: "initialize",
  });
  await myToken.waitForDeployment();
  console.log("MyTokenUpgradeable deployed to:", await myToken.getAddress());

  // Deploy MyNFTUpgradeable
  const MyNFTUpgradeable = await ethers.getContractFactory("MyNFTUpgradeable");
  console.log("Deploying MyNFTUpgradeable...");
  const myNFT = await upgrades.deployProxy(MyNFTUpgradeable, [], {
    initializer: "initialize",
  });
  await myNFT.waitForDeployment();
  console.log("MyNFTUpgradeable deployed to:", await myNFT.getAddress());

  // Deploy NFTMintandStakeUpgradeable
  const NFTMintandStakeUpgradeable = await ethers.getContractFactory("NFTMintandStakeUpgradeable");
  console.log("Deploying NFTMintandStakeUpgradeable...");
  const staking = await upgrades.deployProxy(NFTMintandStakeUpgradeable, 
    [await myToken.getAddress(), await myNFT.getAddress()], 
    { initializer: "initialize" }
  );
  await staking.waitForDeployment();
  console.log("NFTMintandStakeUpgradeable deployed to:", await staking.getAddress());
}

main()
  .then(() => process.exit(0))
  .catch((error) => {
    console.error(error);
    process.exit(1);
  });