[hackermailman]

Daniel Bernstein's qmail has a standing offer from 1997 to find a bug https://cr.yp.to/qmail/guarantee.html and the last version released was in 1998, I guess it's done. He wrote a paper about why it succeeded https://cr.yp.to/qmail/qmailsec-20071101.pdf