It sounds like you're a good guy who want to do the right thing. But no one here can fully understand your situation, and it is not smart for you to be discussing this here. Find a lawyer who can give you good advice and protect your interests.
As much as I sound like I am trying to do the right thing all I am doing is avoid going to jail by doing illegal things and earning to feed my family
I tell you this because I love you: Unburden your soul to your favorite lawyer.
EDIT: I'm leaving this comment here, but I just learned that /r/AusLaw does not provide legal advice under any circumstances. Asking them would likely get you the same "find a lawyer" advice you've gotten here.
I noticed your response to the person who provided the anonymized email address. Hopefully that proves helpful!
One request: it would be really awesome if you could provide an update when this has all blown over (which I realize might be months from now - although I hope the $ side gets resolved way before then!).
On the one hand bumping old threads doesn't surface them again, on the other hand I'd say it would be a 50/50 chance whether an update post would ever actually reach the front page on here. Somewhere on Reddit might be a better idea, but I'm not (yet) quite sure where would be a good practical, relevant and high-visibility spot to put it.
Consulting company: Does NOT want to talk about it at all.
Bank: They were shocked by the news but since I am not their employee they can't reveal their decisions to me. I think they don't want to rock their boat and the consulting firm is major part of their IT division.
Ombudsman: I am technically not an employee. They want to help me but consulting firm refuses to communicate
Lawyers: Understable that they don't want to get involved unless I pay fees (It's like asking me to take a look at perl code for free). Too expensive and risk that I could be counter-sued. Plus it could potentially be criminal liability (With bank code and even customer data used for UAT on the internet).
I wish there was some way to turn this situation into the bank thanking you with some kind of consideration.
At least it's good to hear that the bank now knows about it, although that doesn't really solve your situation.
I take it that fees are a problem because the contract payouts were stopped, more or less? (As infuriating as that type of situation is) For example I know of one lawyer in NSW who takes computer-related work - for mid-range three figures :/ (that said, would this be interesting to you?)
It sounds to me like it would be a very good idea for you to get a concrete, unambiguous idea (ie sit down and work it out with someone) of where you sit in terms of civil liability, relative to your total and utter ignorance (for example, what's the difference between (a) signing up for this contract, (b) walking into the building for the day and (c) committing the code? IANAL (!!!) but I reckon the argument of intent is equally weak with all examples). It's possible you may be less vulnerable than surface/kneejerk intuition might suggest - but of course I could be wrong. (I have absolutely no idea.)
Besides making it clear to the lawyers about the immediate/current liquidity situation, the bank and ombudsman don't seem completely against you, and I wonder how far you could go with that.
I assume you've reiterated all of the context (without unnecessary details, unless that's okay) with the Ombudsman, to see what ideas they might be able to come up with.
With the bank, you've probably scored a few points with the security and related folks there. If the consulting firm is integrated into the bank then that might point to systemic breakdown elsewhere, but on the other hand, their silence could simply be professionalism on their part while they mete out corporate knuckle sandwiches. (Or I could be being ridiculously optimistic.) Maybe you could chase them down and see if they'd be interested in having you on board; worst (ish) case is that you find more of this kind of thing and get even more points. Something to keep in mind.
Finally, have you tried Legal Aid? They're not lawyers per se, but they may be able to give you a bit of a foundation to headscratch through this with. I would definitely call them. (It's only 3PM!)
As a last resort another contract may turn out to be necessary, and I hope that works out if it comes to that. But don't completely give up, even after that point - you refused to do work that could legally compromise you because it violates corporate policy and standard security access controls, due to the craziness and laziness of others. You should still receive your contract payout.
lol at the perl code bit :)
If you want to get in touch, my email is in my profile, and the username you've picked isn't taken on Gmail yet FWIW; there's really nothing interesting Gmail can leak. Just use a fake name/birthday for the associated G+ account that will get created.
For what it's worth, thanks very much for the concise headsup.
I think I can safely assume you'll provide a good idea of your experience in that update!
I'd really appreciate a link to it when you post it - I don't want to miss it.