EthSystems writeup formally verifies a shielded pool from written spec down to testnet bytecode, noting costs and limits

Mathematically checking privacy code all the way to the deployed program is rare, and the writeup says what it caught, what it cost and where the checking stopped.