Quantum Cryptography: A New Frontier in Cryptography

There's indeed different settings, there are different attacks we care about for the private key setting. If a user is trying to be malicious, and it gives a valid money state and tries to figure out information about the state by going through the verification procedure,. This is bad, because if the user can do this many times, it would be able to figure out what the conjugate encoding would really look like. So this is basically one attack against the witness money state, but in some sense, we are making this state publicly verifiable.