ChangeNOW Fixes Website Integration Vulnerability, Announces NOW AI Protection Lab
Key Takeaways
- •ChangeNOW fixed a vulnerability in one of its website integrations after independent security researchers reported it, and the company states it has no evidence the flaw was exploited.
- •Information potentially exposed includes clients' email addresses and transaction details, though the exchange said its transaction infrastructure was unaffected and customer funds were never at risk.
- •The company warned users to be alert for phishing messages that may cite genuine transactions or support interactions, and said it communicates only through support@changenow.io and never requests private keys, seed phrases, or passwords by email.
- •Alongside the disclosure, ChangeNOW launched NOW AI, a protection lab designed to apply AI technology to defensive security across all of the company's products.
- •The company said the incident accelerated NOW AI's launch, with further details and the outcome of its ongoing scenario review to be published on a dedicated website page soon.

Kingstown, Saint Vincent and the Grenadines, October 15, 2026 — Chainwire
Crypto exchange platform ChangeNOW announced on October 15 that, with the help of independent security researchers, it identified a vulnerability affecting one of the integrations used on its website. The flaw has since been fixed, and the company said it currently has no evidence that it was exploited. The involvement of outside researchers follows a standard practice in which flaws are reported directly to the affected company, giving its team a window to patch before the flaw can be misused.
The company is warning clients that the information potentially exposed may include email addresses and transaction details, though it stressed that its transaction infrastructure was not affected and customer funds were never at risk.
"We currently have no evidence that it was exploited. But we also can't assume that the researchers who reported it were the only ones to find it," the company said. "Because of that, we're looking at the different possible scenarios and warning clients about the information that could potentially have been exposed."
Warning on Phishing Attempts
The exchange urged clients to stay alert for suspicious or fraudulent messages, noting that a phony message could reference real transactions or support interactions to appear legitimate. Email addresses and transaction details are exactly the kind of information that can lend a fraudulent message that credibility, which is why the company paired its fix with a public warning. It advised anyone who receives an unexpected message appearing to come from ChangeNOW to verify the sender before responding, clicking any links, or sharing information. ChangeNOW said it contacts clients exclusively via support@changenow.io and will never ask for a private key, seed phrase, or any password by email. Private keys and seed phrases grant full control over a crypto wallet, so any request for them is a hallmark of fraud.
"People contact our support and compliance teams because they trust us with information they would not share publicly, and we understand the responsibility that comes with that," the company said. "We have no indication this vulnerability was exploited, but we believe it is important to warn of the possible risks rather than wait until there is total certainty."
Launch of NOW AI
Alongside the disclosure, ChangeNOW announced the launch of NOW AI, a dedicated protection lab with a mission to raise the security standard across all of the company's products. The initiative is intended to bring AI technology to the defensive side — spotting danger earlier and building stronger security into products — particularly as AI makes malicious action easier to automate and expand.
"Today's case only made the need to move faster more obvious and it accelerated the launch of NOW AI," the company said. "We'll publish more details on our plans, what it covers, and how it will be used across ChangeNOW on a dedicated page on our website soon." Until that page goes live, the promised NOW AI details and the outcome of the company's ongoing scenario review are the immediate follow-ups to watch.
About ChangeNOW
ChangeNOW.io is a crypto super app built for every crypto move, giving newcomers, professionals, and businesses the tools they need to access Web3 finance in a simple and secure way.
Since 2017, ChangeNOW has grown from a fast, secure, and limitless instant exchange into a trusted platform where storage, swaps, trading, staking, and asset management are covered in one simple experience for millions of clients worldwide.
Media Contact: PR Team, CHN Group LLC — pr@changenow.io