| chain | VARCHAR(16777216) | Slug identifying the blockchain this record belongs to. |
| address | VARCHAR(16777216) | The labeled address. |
| label | VARCHAR(16777216) | MEV label assigned to the address (e.g. sandwich_bot, flashloan_arbitrage). |
| entity | VARCHAR(16777216) | Named entity the address is attributed to, when one is known. |
| confidence | FLOAT | Confidence score for the label, between 0 and 1. Carried through from the detector at the time the address was first labeled and not recomputed since, so it reflects the activity seen then rather than today. Use evidence_status and the *_30d columns to judge whether the behavior is ongoing. |
| detected_behaviors | ARRAY | Array of the distinct MEV behaviors detected for this address. |
| signal_count | NUMBER(38,0) | Number of distinct MEV behaviors in detected_behaviors. |
| label_reason | VARCHAR(16777216) | Human-readable explanation of why the address was labeled, summarizing the supporting evidence. |
| detection_rules | ARRAY | Array of the detection rules that fired for this address. |
| evidence_status | VARCHAR(16777216) | How current the supporting evidence is. meets_threshold_now: the address still qualifies on recent activity. historical_evidence_only: MEV activity exists in the address’s history but not in the recent window, so the label is real but the behavior may have stopped. no_evidence_found: labeled upstream with no supporting activity found on this chain; treat as a data-quality signal. Labels accumulate and are not retired, so read this column before relying on a label. |
| sandwich_bundle_count | NUMBER(38,0) | Number of distinct sandwich attacks attributed to the address, approximated by distinct block and pool pairs. The more intuitive “how many attacks” figure. |
| sandwich_leg_tx_count | NUMBER(38,0) | Number of distinct sandwich-leg transactions. Front-run and back-run legs count as separate transactions, so this runs higher than sandwich_bundle_count. |
| sandwich_active_days | NUMBER(38,0) | Number of distinct days on which the address executed a sandwich trade. |
| sandwich_pool_count | NUMBER(38,0) | Number of distinct liquidity pools the address sandwiched. |
| sandwich_projects | ARRAY | Array of the DEX projects on which the address executed sandwich trades. |
| sandwich_volume_usd | FLOAT | Gross USD volume of the address’s sandwich trades over its full history. This is traded volume, not profit. |
| sandwich_leg_tx_count_30d | NUMBER(38,0) | Distinct sandwich-leg transactions in the trailing 30-day window. Use with sandwich_volume_usd_30d to judge whether the address is still active. |
| sandwich_volume_usd_30d | FLOAT | Gross USD sandwich volume in the trailing 30-day window. Traded volume, not profit. |
| sandwich_first_seen | TIMESTAMP_NTZ(9) | Timestamp (UTC) of the address’s earliest observed sandwich trade. |
| sandwich_last_seen | TIMESTAMP_NTZ(9) | Timestamp (UTC) of the address’s most recent observed sandwich trade. |
| flashloan_arb_tx_count | NUMBER(38,0) | Number of distinct flashloan arbitrage transactions attributed to the address over its full history. |
| flashloan_arb_leg_count | NUMBER(38,0) | Total number of individual trade legs across the address’s flashloan arbitrage transactions. |
| flashloan_active_days | NUMBER(38,0) | Number of distinct days on which the address executed a flashloan arbitrage. |
| flashloan_volume_usd | FLOAT | Gross USD volume of the address’s flashloan arbitrage transactions over its full history. Traded volume, not profit. |
| flashloan_arb_tx_count_30d | NUMBER(38,0) | Distinct flashloan arbitrage transactions in the trailing 30-day window. |
| flashloan_volume_usd_30d | FLOAT | Gross USD flashloan arbitrage volume in the trailing 30-day window. Traded volume, not profit. |
| flashloan_first_seen | TIMESTAMP_NTZ(9) | Timestamp (UTC) of the address’s earliest observed flashloan arbitrage. |
| flashloan_last_seen | TIMESTAMP_NTZ(9) | Timestamp (UTC) of the address’s most recent observed flashloan arbitrage. |
| total_evidence_tx_count | NUMBER(38,0) | Combined count of sandwich-leg and flashloan arbitrage transactions supporting the label. |
| total_evidence_volume_usd | FLOAT | Combined gross USD volume across all MEV activity supporting the label. Traded volume, not profit. |
| evidence_first_seen | TIMESTAMP_NTZ(9) | Timestamp (UTC) of the earliest MEV activity observed for this address, across all behaviors. |
| evidence_last_seen | TIMESTAMP_NTZ(9) | Timestamp (UTC) of the most recent MEV activity observed for this address, across all behaviors. The best single indicator of whether the address is still operating. |
| evidence_window_days | NUMBER(38,0) | Length in days of the trailing window used to compute the *_30d evidence columns and evidence_status. |
| source_type | VARCHAR(16777216) | Type of source that produced the label (e.g. heuristic, manual). |
| source_system | VARCHAR(16777216) | System that produced the label. |
| attribution_date | DATE | Date on which the label was attributed to the address. |
| _created_at | TIMESTAMP_NTZ(9) | Timestamp of when the entry was created in the database. |
| _updated_at | TIMESTAMP_NTZ(9) | Timestamp of when the entry was last updated in the database. |
