Cryptographic protocols often use formal verification because their errors are often not crashes but silent security failures, and once deployed they are almost impossible to patch after the fact.