Practical overview
When it fits
Use it when preparing a specific one-transaction Ethereum whitehat operation and you need a template that documents local fork testing before private broadcast.
Who it is for
- Experienced Solidity and Foundry developers preparing a specific Ethereum whitehat response.
- Security professionals who need a documented fork-testing workflow before a private transaction broadcast.
Documented uses
- Adapt a Solidity contract and Foundry script for a particular whitehat response operation.
- Run the proposed script against a local Anvil fork and impersonated account.
- Follow the repository’s prescribed step from fork testing to a private Flashbots RPC broadcast without changing the tested files.
Requirements & limits
The repository is public and instructs users to fork it. Supplied metadata does not specify a software license.
- Requires Foundry and command-line familiarity with Anvil, Forge scripts and RPC settings.
- The README’s example fork uses an Ethereum RPC URL and its local testing commands target port 8545.
- The documented private broadcast stage uses Flashbots’ RPC endpoint and calls for full privacy.
- The repository cautions that whitehacks are difficult and should be executed by professionals; it identifies the content as educational and provided as-is.
Check current requirements in the official documentation. Source-based guidance does not mean OpenViST has run or independently tested this project.
Prepare and test a whitehat script on an Anvil fork
Adapt the repository’s Solidity contract and Foundry script, then run the script against a local Ethereum fork before any broadcast.
Before you start
- A fork of the Whitehacks Kit repository
- Foundry installed
- An Ethereum RPC URL for the Anvil fork
- The account address to impersonate in the local fork
Steps
Fork the repository and install Foundry.
Edit src/Whitehack.sol and adapt script/Whitehack.s.sol for the intended response.
Unset ETH_RPC_URL and check whether port 8545 is listening, as described in the README.
Start Anvil with an Ethereum RPC fork, impersonate the account on localhost:8545, and run WhitehackScript against that local RPC endpoint.
Expected outcome
The adapted Foundry script is run against a local Anvil fork for the proposed scenario.
Guide limitations
- The guide cautions that whitehacks should be executed by professionals.
- A fork test does not establish safety for other scenarios or networks.
- The repository says not to change the script or contract after testing; the subsequent private broadcast is a separate stage.
Sources & review
Source record details
- Source availability
- Active
- Sources checked
- 17 October 2026
- Original website title
- emilianobonassi/whitehacks-kit · Official homepage title · retained in its source language

