ChangeNOW has fixed a vulnerability affecting one of the integrations used on its website, the platform announced on October 15. The company stated it has no evidence the vulnerability was exploited, though it acknowledged that independent security researchers who reported the issue may not have been the only ones to discover it.
The vulnerability potentially exposed email addresses and transaction details, according to ChangeNOW's statement. However, the company emphasized that its transaction infrastructure was not affected and customer funds were never at risk.
ChangeNOW warned clients to remain vigilant against fraudulent communications. The platform cautioned that phony messages could reference real transactions or support interactions to appear legitimate. ChangeNOW stated it exclusively contacts clients via [email protected] and will never request private keys, seed phrases, or passwords via email.
In response to the incident, ChangeNOW announced the launch of NOW AI, described as a dedicated protection lab aimed at raising security standards across its products. The initiative is designed to apply artificial intelligence technology to defensive security measures, with the stated goal of identifying threats earlier and strengthening security in ChangeNOW's offerings.
ChangeNOW, which has operated since 2017, describes itself as a crypto super app offering exchange, storage, trading, staking, and asset management services to millions of clients worldwide.
