"In 2017, Pedro Fonseca and colleagues audited three formally verified distributed-system prototypes and found 16 bugs across them."
The researchers examined IronFleet, Verdi, and Chapar and uncovered 16 real bugs involving specifications, unverified components, and verification infrastructure. Their investigation found no bugs in the verified distributed-protocol implementations, demonstrating both the effectiveness of formal verification and the importance of its surrounding assumptions.
View Source