SELECT

swapper as trader,

COUNT(DISTINCT tx_id) AS trades,

SUM(swap_from_amount_usd) AS fake_volume,

SUM(CASE WHEN swap_from_amount_usd < 10 THEN 1 ELSE 0 END) AS micro_trades

FROM solana.defi.ez_dex_swaps

WHERE block_timestamp >= DATEADD('day', -30, CURRENT_TIMESTAMP)

GROUP BY 1

HAVING micro_trades > 50 AND fake_volume/trades < 1 -- High freq, low value

SELECT

COALESCE(l.address_name, l.label, s.trader) as trader_address,

s.trades,

s.fake_volume,

s.micro_trades

FROM suspicious_pairs s

LEFT JOIN solana.core.dim_labels l ON s.trader = l.address

ORDER BY fake_volume DESC

LIMIT 10