Buggy C++ (including use of == in place of =) enabled an attacker to create Zcoin from thin air: https://makebitcoingreatagain.wordpress.com/2017/02/18/is-the-zcoin-bug-in-checktransaction/ (formal methods?)