Best would obviously be to not have a DoS vulnerability in the first place 
which is easier if the implementations are simpler and more narrowly focused (e.g. proving a set of transactions’ signatures are valid).
Best would obviously be to not have a DoS vulnerability in the first place which is easier if the implementations are simpler and more narrowly focused (e.g. proving a set of transactions’ signatures are valid).