The timsort bug:
http://www.envisage-project.eu/proving-android-java-and-pyth...
Most software that's correctness critical is not written in Java.
But I could see KeY-verified voting machines as at least better than the status quo (as long as you take it as an assumption that for whatever reason we absolutely need voting machines).