Probably the poster children of verification:

* http://compcert.inria.fr/

* https://sel4.systems/