Deploy e-near proxy securely by setting an admin address to multisig (#298)

Author: kiseln

evm/README.md

@@ -12,7 +12,7 @@ yarn hardhat check
 
 **Deploy eNearProxy**
 ```shell
-yarn hardhat deploy-e-near-proxy --enear "<eNear address>" --network=sepolia
+yarn hardhat deploy-e-near-proxy --enear "<eNear address>" --admin "<admin address>" --network=sepolia
 ```
 
 **Deploy ERC20 token implementation**

evm/src/eNear/contracts/ENearProxy.sol

@@ -19,13 +19,13 @@ contract ENearProxy is UUPSUpgradeable, AccessControlUpgradeable, ICustomMinter
         _disableInitializers();
     }
 
-    function initialize(address _eNear, bytes memory _nearConnector, uint256 _currentReceiptId) public initializer {
+    function initialize(address _eNear, bytes memory _nearConnector, uint256 _currentReceiptId, address _adminAddress) public initializer {
         __UUPSUpgradeable_init();
         __AccessControl_init();
         eNear = IENear(_eNear);
         nearConnector = _nearConnector;
         currentReceiptId = _currentReceiptId;
-        _grantRole(DEFAULT_ADMIN_ROLE, _msgSender());
+        _grantRole(DEFAULT_ADMIN_ROLE, _adminAddress);
     }
 
     function mint(address token, address to, uint128 amount) public onlyRole(MINTER_ROLE) {

evm/src/eNear/scripts.ts

@@ -12,7 +12,7 @@ task("deploy-e-near-proxy", "Deploys the ENearProxy contract")
     const eNearProxyContract = await ethers.getContractFactory("ENearProxy")
     const eNearProxy = await upgrades.deployProxy(
       eNearProxyContract,
-      [taskArgs.enear, nearConnector, 0],
+      [taskArgs.enear, nearConnector, 0, taskArgs.admin],
       {
         initializer: "initialize",
         timeout: 0,

evm/tests/eNearProxy.test.ts

@@ -52,7 +52,12 @@ describe("eNearProxy contract", () => {
     const eNearProxyFactory = await ethers.getContractFactory("ENearProxy")
     eNearProxy = (await upgrades.deployProxy(
       eNearProxyFactory,
-      [await eNear.getAddress(), Buffer.from("eNearBridge", "utf-8"), 0],
+      [
+        await eNear.getAddress(),
+        Buffer.from("eNearBridge", "utf-8"),
+        0,
+        await deployer.getAddress(),
+      ],
       { initializer: "initialize" },
     )) as unknown as ENearProxy