0xBlackfishVampire Attack
    Updated 2024-01-10
    with
    base as (
    select
    s.signer as address
    , case when array_contains('4MangoMjqJ2firMokCjjGgoK8d4MXcrgL7XJaL3w6fVg'::variant,s.programs_used) then true else false end as has_used_mango
    , case when array_contains('dRiftyHA39MWEi3m9aunc5MzRF1JYuBsbn6VPcn33UH'::variant,s.programs_used) then true else false end as has_used_drift
    , case when array_contains('ZETAxsqBRek56DhiGXrn75yj2NHU3aYUnxvHXpkf3aD'::variant,s.programs_used) then true else false end as has_used_zeta
    from solana.core.ez_signers s
    where
    (
    array_contains('4MangoMjqJ2firMokCjjGgoK8d4MXcrgL7XJaL3w6fVg'::variant,s.programs_used) or -- mango_v4
    array_contains('dRiftyHA39MWEi3m9aunc5MzRF1JYuBsbn6VPcn33UH'::variant,s.programs_used) or -- drift_v2
    array_contains('ZETAxsqBRek56DhiGXrn75yj2NHU3aYUnxvHXpkf3aD'::variant,s.programs_used) -- zeta
    )
    and s.last_tx_date >= date('2023-10-01')
    )

    select *
    from base b
    where
    (b.has_used_mango or b.has_used_drift)
    and not b.has_used_zeta
    QueryRunArchived: QueryRun has been archived