Commonwealth Bank of Australia could be on the hook for a large penalty after the court found the bank engaged in misleading and deceptive conduct and violated its financial services obligations on more than 12,000 occasions by overcharging customers more than $2.2 million in interest.