Aptos has been selling the narrative of "formal verification = security" for two years with Move VM.

Hexens discovered a cache bug that allows forging arbitrary resource objects at a cost of a few dollars, with a 90% simulation success rate.
Assets worth $70 billion on the chain were nearly drained for a few hundred dollars.
Quietly fixed in February, zero loss, everyone happy—but the point is not that "it's fixed," but that Move was never secure; it just wasn't being watched.
PoW has lasted 15 years because the cost of attack is energy. Move VM lasted half a year and almost got taken down by pocket change.
Your "secure design" doesn't have no vulnerabilities; it just hasn't been targeted yet.