There's a site that got banned from all the captcha services and switched to a homegrown proof of work system. You can tie the PoW difficulty to the level of DDoS as well so the impact is minimal when not under attack.