X @vitalik.eth

Modexp seems to be by far the worst offender in terms of ZK-EVM prover-unfriendliness; up to 50x worse than average blocks.We really should do an EIP to replace the precompile with computationally equivalent EVM code (which would cost more gas)Very few apps need modexp (it's basically RSA encryption/signing), and those that do can wrap it in a SNARK. ...