Gotcha. Module shards is what I meant by shards. Anyway, I experimented on a new account like you suggested. Just looking for the addresses and freezing the values seems to be the safest bet. I check my tourney tab if I get ding'd every time I change a value. Haha.
As for banning spree, maybe look at tourney history since that's the easiest telltale of someone is hacking e.g. T24W4500 at Copper 30 with 6 relics.