On October 15, with the help of independent security researchers, ChangeNOW identified a vulnerability affecting one of the integrations used on its website. The vulnerability has now been fixed.
What We Know
We currently have no evidence that the vulnerability was exploited. But we also can’t assume the researchers who reported it were the only ones to find it. Out of caution, we are reviewing possible scenarios and proactively warning clients about information that may have been exposed—which may include email addresses and transaction details.
Importantly, ChangeNOW’s transaction infrastructure was not affected, and customer funds were never at risk.
What Clients Should Watch For
Right now, the main thing to watch for is suspicious or fraudulent messages. A fake message could reference real transactions or support interactions to appear legitimate. If you receive an unexpected message that looks like it’s from ChangeNOW, please verify the sender before responding, clicking any links, or sharing any information.
We contact clients exclusively via support@changenow.io, and we will never ask for a private key, seed phrase, or any password by email.
Why We’re Being Transparent
People contact our support and compliance teams because they trust us with information they wouldn’t share publicly, and we take that responsibility seriously. We have no indication this vulnerability was exploited—but we believe it’s right to warn of possible risks rather than wait for full certainty.
Introducing NOW AI
Our clients are at the center of everything we do, and we’re continuing to strengthen our product protection. One key step is launching NOW AI, a dedicated protection lab with a mission to raise security standards across all ChangeNOW products.
The goal is to apply the same advanced technology to the defensive side — spotting danger earlier and building stronger security into our products, especially as AI makes malicious activity easier to automate and scale. Today’s case only sharpened that need and accelerated NOW AI’s launch.
We’ll share more about NOW AI’s scope, plans, and how we’ll use it across ChangeNOW on a dedicated page soon.
About ChangeNOW
ChangeNOW.io is a crypto super app built for every crypto move — giving newcomers, professionals, and businesses the tools to access Web3 finance simply and securely. Since 2017, ChangeNOW has grown from a fast, secure, limitless instant exchange into a trusted platform that brings storage, swaps, trading, staking, and asset management together in one simple experience for millions of clients worldwide.