Kingstown, Saint Vincent and the Grenadines, October 15, 2026 — Chainwire

ChangeNOW, the instant cryptocurrency exchange platform, announced on October 15 that it had identified and fixed a vulnerability affecting one of the integrations used on its website. The disclosure came alongside the launch of NOW AI, a new security initiative the company said the incident helped accelerate.

According to the announcement, the flaw was discovered with the help of independent security researchers and has since been patched. Outside researchers flagging flaws directly to vendors is a hallmark of coordinated vulnerability disclosure, a standard software-security practice designed to get fixes in place before issues can be widely abused. ChangeNOW said it currently has no evidence the vulnerability was exploited, but cautioned that it "can't assume that the researchers who reported it were the only ones to find it."

"Because of that, we're looking at the different possible scenarios and warning clients about the information that could potentially have been exposed," the company said, noting that the data in question may include email addresses and transaction details.

The platform stressed that its transaction infrastructure was not affected and that customer funds were never at risk.

Company officials identified suspicious or fraudulent messages as the main thing clients should watch out for, warning that a phony message could reference real transactions or support conversations to appear legitimate. For recipients, that means accurate details alone are not proof a message is genuine. ChangeNOW advised anyone who receives an unexpected message appearing to come from the company to verify the sender before responding, clicking any links, or sharing information. The company emphasized that it contacts clients exclusively via support@changenow.io and "will never ask for a private key, seed phrase, or any password by email."

"People contact our support and compliance teams because they trust us with information they would not share publicly, and we understand the responsibility that comes with that," ChangeNOW said. "We have no indication this vulnerability was exploited, but we believe it is important to warn of the possible risks rather than wait until there is total certainty."

As part of its broader response, ChangeNOW unveiled NOW AI, a dedicated protection lab with a mission to raise the security standard across all of the company's products. The initiative aims to apply AI technology to the defensive side, spotting danger earlier and building stronger protections into products at a time when AI makes malicious action easier to automate and expand — a duality that reflects the broader role AI now plays on both sides of cybersecurity.

The company said the day's incident made the need to move faster more obvious and accelerated NOW AI's launch. Additional details on the lab's plans, what it covers, and how it will be used across ChangeNOW will be published on a dedicated page on the company's website soon, making that page the place to watch for how the initiative takes shape across the company's products.

About ChangeNOW

ChangeNOW.io is a crypto super app built for every crypto move, giving newcomers, professionals, and businesses the tools they need to access Web3 finance in a simple and secure way. Since 2017, ChangeNOW has grown from a fast, secure, and limitless instant exchange into a trusted platform where storage, swaps, trading, staking, and asset management are covered in one simple experience for millions of clients worldwide.