Large lenders with access to the model are finding hundreds to thousands of weaknesses in their systems and sharing findings with smaller banks