Aptos Labs has been formally verifying the @Aptos Framework since before mainnet.
Now, the Move Prover is leveling up the full stack for markets and machines: AI-assisted spec generation, first-class function verification, and proof hints. @DecibelTrade is the next major target.