This week Mikrotik have confirmed to us that there is a major bug in router os v 6.40.x releases. This mainly effects higher users of IPSec but can effect anyone and will drive your router to about 50% cpu.
Please note that 6.40.x is the new bugfix version!
Either use 6.39.x or 6.41.x.
This bug totally took out our datacenter and only effects tile 1009, 1016, 1036 and 1072 CCR routers. The annoying thing is that there is nothing in the change logabout the re-write to the IPSec stack (which was totally re-written in 6.40.x) and it crashes on the tile routers.