https://www.springerprofessional.de/en/formal-verification-o...
Another big example is the fact that Frama-C/WP is used for formal verification of some functional properties in aircraft software.