Intel (and presumably others) use formal methods to verify their hardware designs, or at least large portions of them. This started in earnest after the FDIV bug. Here's a presentation on the topic (dated now, but my understanding is the use of formal methods has only increased since then).

https://www.cl.cam.ac.uk/~jrh13/slides/nijmegen-21jun02/slid...