is it correct  that i just need to input public address? if so, someone who know my public address can steal my coin