I used esbmc, and it was better than cbmc. I also used it in 8/16 bit firmware, because there is where it shines. Small and easy to verify. The libraries were bad, yes, so I had to fix it. No big deal. The device has to run for years without update, so it needs verification.