CSAFA labs is utilizing formal methods to reason about exploit chains. Exploits are mapped onto Hoare Triples, and properties such as exploitability, chainability and fragility can be reasoned.
Reasoning for Exploits Chain: METALLIC
Research Professor @ Georgia Institute of Technology