Yeah well said. To bypass encrypted token there are multiple ways like

1. Check multiple verification token and look for common in it. You may end up with algo they are using.

2. Try to use the same token with another account.

3. Try to reuse the token.