Hi to the HB-Team and their coder/developer,
in fact you will research everything to find and understand this last hit of blizzard against HB.
In my opinion there are two things.
1st: Warden was updated (since last years!?) and everyone was looking for something new to find HB or other routines in this way to find bots. Afterall everyone was sure about Warden after this update for using HB again. Maybe we all were not right.
2nd: It´s more then effective to use any kind of spy behind the frontlines. If any coding or routine make any conclusion to this new Warden-Update it´s perfect to collect these users by using HB (and still not know for this long timeline).
I think Buddy Store was a great step for HB in service and quick simplify using. But also there are a lot of ways to misusing by Blizzard. In fact: could everyone be sure any coding in BuddyStore was not sold from coder to Blizzard, otherwise Blizzard himself did code something for Buddystore to find any way to find HB-users ?
You know in coding: every little thing could placed in coding (looking "harmless" like i.e. special toon-movement or similar easy ways). You will never be sure about this if Warden is looking for this special way of toon-moving/action/handling.
Blizzard seems to pay lot of money to take advantage (law/coding/etc) in controling bot-users. So they will also pay for less money to take directly way behind these frontlines by any coder for i.e. Buddystore or maybe deep in HB if they can get any chance of this.
Defenitly for me is in result the best "secure way" of using HB by using "only" basics in function and still loading only proofed profiles or i.e. by certified users/profiles/functions.
For sure you will also investigate also in these directions. But if this is really right this will be impossible to find for now. If there is any kind of "backdoor" you will hit this backdoor by using in the same way any kind of unkown/hidden backdoor (unknown to all new and strange coder) and going back online with HB to find this backdoor.
Remember to check everything new in coding-persons "before" last Warden-update. In my single opinion maybe they find a way to use Warden by any backdoor and syncronized with this Warden-update (also) this new function for detecting. So they had planned this for a long time.
New WOW- or HB-updates will not really take any effect to this last big banwave. And coding in this way is most not only trying one, coding in most cases should be safe for a long time. To protect sources you can place 2-3 backdoors and also easy "traps" and anyone is believing to find the main backdoor. Also not one, maybe 2 different coding ways or personally coder, or just 2 different functions are working to Blizzards Warden. In this case it´s really hard to find.
I used last months HB not very often (check my Auths), and only one WOW-account was banned. And this WOW-account was the only one using HB (4-5x monthly!) after this Warden-update. Of course at last I bought several functions in Buddystore (i.e. also all Garrison-functions). -> And any other of 10 Accounts (using HB before) was not banned !
Maybe you will find another explanation, but HB got more insecure in using Buddystore. Hopefully I will not be right, and hopefully you will find asap any way to find this "leak" and making HB again more safe then before.
I wish you the best and I will using HB in future again, also supporting HB in any way. Hopefully you will also continue as long as WOW exists, maybe of course as long as you all want to do this. ;-)
Keep on working this great job !!
in fact you will research everything to find and understand this last hit of blizzard against HB.
In my opinion there are two things.
1st: Warden was updated (since last years!?) and everyone was looking for something new to find HB or other routines in this way to find bots. Afterall everyone was sure about Warden after this update for using HB again. Maybe we all were not right.
2nd: It´s more then effective to use any kind of spy behind the frontlines. If any coding or routine make any conclusion to this new Warden-Update it´s perfect to collect these users by using HB (and still not know for this long timeline).
I think Buddy Store was a great step for HB in service and quick simplify using. But also there are a lot of ways to misusing by Blizzard. In fact: could everyone be sure any coding in BuddyStore was not sold from coder to Blizzard, otherwise Blizzard himself did code something for Buddystore to find any way to find HB-users ?
You know in coding: every little thing could placed in coding (looking "harmless" like i.e. special toon-movement or similar easy ways). You will never be sure about this if Warden is looking for this special way of toon-moving/action/handling.
Blizzard seems to pay lot of money to take advantage (law/coding/etc) in controling bot-users. So they will also pay for less money to take directly way behind these frontlines by any coder for i.e. Buddystore or maybe deep in HB if they can get any chance of this.
Defenitly for me is in result the best "secure way" of using HB by using "only" basics in function and still loading only proofed profiles or i.e. by certified users/profiles/functions.
For sure you will also investigate also in these directions. But if this is really right this will be impossible to find for now. If there is any kind of "backdoor" you will hit this backdoor by using in the same way any kind of unkown/hidden backdoor (unknown to all new and strange coder) and going back online with HB to find this backdoor.
Remember to check everything new in coding-persons "before" last Warden-update. In my single opinion maybe they find a way to use Warden by any backdoor and syncronized with this Warden-update (also) this new function for detecting. So they had planned this for a long time.
New WOW- or HB-updates will not really take any effect to this last big banwave. And coding in this way is most not only trying one, coding in most cases should be safe for a long time. To protect sources you can place 2-3 backdoors and also easy "traps" and anyone is believing to find the main backdoor. Also not one, maybe 2 different coding ways or personally coder, or just 2 different functions are working to Blizzards Warden. In this case it´s really hard to find.
I used last months HB not very often (check my Auths), and only one WOW-account was banned. And this WOW-account was the only one using HB (4-5x monthly!) after this Warden-update. Of course at last I bought several functions in Buddystore (i.e. also all Garrison-functions). -> And any other of 10 Accounts (using HB before) was not banned !
Maybe you will find another explanation, but HB got more insecure in using Buddystore. Hopefully I will not be right, and hopefully you will find asap any way to find this "leak" and making HB again more safe then before.

I wish you the best and I will using HB in future again, also supporting HB in any way. Hopefully you will also continue as long as WOW exists, maybe of course as long as you all want to do this. ;-)
Keep on working this great job !!