@casaislabs
a logic error let you mint infinite zcash. sat in production 4 years. found in a day once a model looked at it.
every audit that cleared it was done by smart humans. the bug hid from the limits of human review, not from incompetence.
formal verification just stopped being optional.