Low: Polygon zkEVM, Scroll (brute-force EVM emulation is computationally expensive) - Medium: StarkNet (Cairo is ZK-native, but STARKs have overhead) - High: zkSync (custom VM optimized for ZK proving)