Crypto platform ChangeNOW announced the resolution of a vulnerability affecting one of the integrations used on its website. The issue was discovered on October 15, 2026, with the assistance of independent security researchers.
According to ChangeNOW, there is currently no evidence that the vulnerability was exploited. However, the company stated it cannot assume the reporting researchers were the only parties to identify the issue. Consequently, ChangeNOW is warning clients that certain information may have potentially been exposed, including email addresses and transaction details.
The platform emphasized that its transaction infrastructure remained unaffected and that customer funds were never at risk. Clients have been advised to watch out for suspicious or fraudulent messages that might reference real transactions or support interactions to appear legitimate. ChangeNOW stated that it exclusively contacts clients via its official support email and will never request private keys, seed phrases, or passwords.
In response to the incident, ChangeNOW accelerated the launch of NOW AI, a dedicated protection lab designed to raise security standards across all company products. The initiative aims to utilize technology to identify threats earlier and build stronger security measures into the platform's offerings.
Further details regarding the plans, coverage, and implementation of NOW AI are scheduled to be published on a dedicated page on the ChangeNOW website.
