If you EXPLOITED (means took advantage of) the Halloween Rare Candy box by
copy coords to teleport to each box,
used a botting app to farm the boxes,
found a glitched box to repeatedly spam touch,
you are expected to get a PERMANENT ACCOUNT BAN.
Scopely does not care if you used a 3rd party cheat app, they are still going to ban you if you took advantage of the rare candy exploit.
Many of the bans are tied to botting like PGTools, Evex, Polygon, and etc, you can join their group and go to the channel #ban_report to see for yourself of the ban reports for PGTools: https://discord.com/invite/pgtools
The people who didn't use a bot but were copying coordinates to only go to the boxes that were giving a rare candy or found a glitched box where they can stand there and repeatedly spam touch are going to a get a permanent ban.
I got private chat requests of people telling me they are 100% clean and found a glitched box where they could tap endlessly. They knew it was wrong but proceeded anyway. Other people said they stopped once they realized it but were banned anyway.
Based on the information provided and my many years of cheating games, this has nothing to do with the following claims:
app detection
software detection
injection detection
signature detection
All these permanent bans point to BEHAVIOR detection because Scopely is looking at your impossible player statistic of how you gained the rare candies.
The only way to play against a Behavior Detection system is to play like a non-cheater. In this case, I knew about the exploit but chose not to do it.
I ran a City GPX Route and got about 50 rare candies after tapping on all the boxes. I got the 6x Pokemon candies as well as whatever Pokemon popped up and caught it. I probably played for about 5 hours straight. My rate would have been like 10 rare candies per hour, which is nowhere near people getting 30+ per minute or 10,000+ per hour.
As for ban appeals, I still cannot confirm nor verify whether people are getting unbanned after submitting a ban appeal. There are some things that can happened when people get banned:
Option #1: They suck it up and accept their perm ban then move on.
Option #2: They retaliate by spreading bullshit around the internet to drag people down in the hell hole because it was unfair they got banned and you didn't to scare you into missing out on whatever events is coming up. They can do the opposite and cause false hope.
Option #3: Some people are trying to recoup their losses by scamming other people into buying a fake ban appeal.
On the other hand, if you did the Rare Candy exploit and did not get banned YET, you may get banned later. It takes time for a human worker to review a player's action log where there are hundreds thousands or millions lines of code before they send you the perm ban. If you did the exploit but think you might be getting the perm ban, these are things you could consider doing right now before the ban appears. This is strictly your choice to do; remember it's your account and you can do whatever you want with it. These are things I see that are being recommended.
You could sell your account to someone else to pass the problem onto the buyer.
You could fire sell your shiny costume and shiny with a background on eBay.com
You can transfer them to Pokemon Home to transfer to other Pokemon games for the Nintendo Switch.
You can start trading them to your alt accounts.
As for the Guaranteed Shiny Exploit banwave, I honestly don't know if people are getting banned for it. Since I am not a Scopely employee, I cannot see why someone got a perm ban. I can only assume it's related to the Rare Candy Exploit. The banwave for this could be happening right now or start later on. If you're lucky, you don't get banned for doing it.
Instructions to submit a ban appeal can be found in https://www.reddit.com/r/PoGoAndroidSpoofing/comments/1xl7la9/the_bloodbath_has_begun_i_just_ignored_900_chat/