I wish John Regehr was more widely read. The constant grind that improving formal method tools is a somehow unrewarding but worthy calling.

Missing runtime checks are a pain and I remember one that struck me as hard: https://www.adacore.com/blog/the-most-obscure-arithmetic-run...