"Nadim Kobeissi’s 2026 study documents vulnerabilities in formally verified cryptographic projects, including failures outside verified code and within specification or proof artifacts."
Kobeissi's cryptographic-library case study reports 13 vulnerabilities, including nine in unverified code and four involving specification or proof code. The findings directly illustrate why the advertised scope of verification and the correctness of its assumptions are critical to interpreting formal security guarantees.
View Source