Proof of work

A $300 solver bill leaves CAPTCHA at 5% of a credential run's cost of goods

The 5% comes from one dev.to post's worked example, and it holds only if an attacker's hit rate against your login is near 0.3% and a stolen account resells near $20. At a 0.03% hit rate the same bill is half of revenue.