NewsCryptoChangeNOW Launches NOW AI Protection Lab After Resolving Website Integration Vulnerability

ChangeNOW Launches NOW AI Protection Lab After Resolving Website Integration Vulnerability

Author: CoinoMedia·

Key Takeaways

  • •ChangeNOW disclosed and patched a vulnerability in one of its website integrations on October 15, 2026, after independent security researchers reported the flaw through coordinated vulnerability disclosure.
  • •The company stated there is no evidence the vulnerability was exploited, though potentially exposed data may include email addresses and transaction details.
  • •ChangeNOW emphasized that its transaction infrastructure was not affected and customer funds were never at risk.
  • •The company simultaneously launched NOW AI, a protection lab aimed at raising security standards across its products and detecting threats earlier, with the incident accelerating its rollout.
  • •Clients were advised to verify senders of unexpected messages, as ChangeNOW contacts users exclusively via support@changenow.io and never requests private keys, seed phrases, or passwords by email.
ChangeNOW Launches NOW AI Protection Lab After Resolving Website Integration Vulnerability

Kingstown, Saint Vincent and the Grenadines, October 15, 2026 — ChangeNOW announced the launch of NOW AI, a dedicated protection lab, on the same day it disclosed and fixed a vulnerability affecting one of the integrations used on its website.

The company said it identified the flaw on October 15 with the help of independent security researchers and has since patched it. The tight sequence — outside researchers reporting a flaw that is then patched and publicly disclosed — reflects coordinated vulnerability disclosure, the practice in which researchers hand findings to a company directly so fixes and warnings can reach users as quickly as possible. Integrations are a recurring subject of such research because they extend the code and data flows a platform depends on beyond its core systems. According to ChangeNOW, there is currently no evidence the vulnerability was exploited, though the company noted it cannot assume the researchers who reported it were the only ones to find it.

"Because of that, we're looking at the different possible scenarios and warning clients about the information that could potentially have been exposed," the company said. Potentially exposed data may include email addresses and transaction details.

ChangeNOW stressed that its transaction infrastructure was not affected and that customer funds were never at risk.

The company warned clients to stay alert for suspicious or fraudulent messages, noting that a phony message could reference real transactions or support conversations to appear legitimate. It advised anyone who receives an unexpected message claiming to be from ChangeNOW to verify the sender before responding, clicking links, or sharing information. ChangeNOW said it exclusively contacts clients via support@changenow.io and will never ask for a private key, seed phrase, or any password by email. That caution tracks with how crypto credentials work: a seed phrase or private key grants direct control over holdings, which is why unsolicited requests for them are widely treated as a hallmark of theft attempts.

"People contact our support and compliance teams because they trust us with information they would not share publicly, and we understand the responsibility that comes with that," the company stated. "We have no indication this vulnerability was exploited, but we believe it is important to warn of the possible risks rather than wait until there is total certainty."

NOW AI Protection Lab

Alongside the disclosure, ChangeNOW unveiled NOW AI, a dedicated protection lab with a mission to raise the security standard across all of the company's products. The company said it aims to apply the same technology defensively to spot danger earlier and build stronger security into its products, especially as AI makes malicious action easier to automate and expand.

According to the company, the incident made the need to move faster more obvious and accelerated NOW AI's launch. More details on the lab's plans, its scope, and how it will be used across ChangeNOW will be published on a dedicated page on the company's website, giving clients a single place to follow how the lab's work reaches its products.

About ChangeNOW

ChangeNOW.io is a crypto super app built for every crypto move, giving newcomers, professionals, and businesses the tools they need to access Web3 finance in a simple and secure way. Since 2017, ChangeNOW has grown from a fast, secure, and limitless instant exchange into a trusted platform where storage, swaps, trading, staking, and asset management are covered in one simple experience for millions of clients worldwide.

Press contact: PR Team, CHN Group LLC — pr@changenow.io