You have high-stake operations in relatively small code base, so you better pick a language and tools compatible with formal verification or even supporting it natively.