ChangeNOW Announces NOW AI After Resolving Website Integration Vulnerability

Source: TechBullion2026/10/16 05:01
Analysis
ChangeNOW disclosed that a vulnerability in one of its website integrations, found on October 15 with independent security researchers, has been patched, and it says there is no evidence of exploitation while warning that email addresses and transaction details could potentially have been exposed. The company states its transaction infrastructure was untouched and customer funds were never at risk, so the practical exposure is limited to contact and order metadata that could be used for phishing rather than direct loss of assets. The most concrete follow-on risk is social engineering: ChangeNOW is telling users to verify senders and stressing that it never requests private keys, seed phrases, or passwords by email. The disclosure also accelerated the launch of NOW AI, a dedicated protection lab intended to raise security standards across ChangeNOW products, with further details promised on a dedicated page. What to watch next is whether the promised NOW AI scope and timeline are published, whether any affected users report follow-on phishing attempts, and whether the incident prompts similar non-custodial swap services to tighten third-party integration review.

If you have any feedback or questions about this content, please contact us at crypto.news@kcex.com

Press Release

ChangeNOW Announces NOW AI After Resolving Website Integration Vulnerability

Press ReleaseThis is a press release. It was supplied by a third party and was not written by the TechBullion editorial team.

ChangeNOW announces NOW AI, a new security initiative designed to improve protection across its products

On October 15, with the help of independent security researchers, we found a vulnerability affecting one of the integrations used on the ChangeNOW website. The vulnerability has now been fixed.

We currently have no evidence that it was exploited. But we also can’t assume that the researchers who reported it were the only ones to find it. Because of that, we’re looking at the different possible scenarios and warning clients about the information that could potentially have been exposed. This may include email addresses and transaction details.

Please note ChangeNOW’s transaction infrastructure was not affected, and customer funds were never at risk.

The main thing clients should watch out for now is suspicious or fraudulent messages. A phony message could reference real transactions or support to appear legitimate. If you get an unexpected message that looks like it’s from ChangeNOW, please check the sender before responding, clicking on any links or giving any information. We exclusively contact clients via [email protected] and we will never ask for a private key, seed phrase, or any password by email.

People contact our support and compliance teams because they trust us with information they would not share publicly, and we understand the responsibility that comes with that. We have no indication this vulnerability was exploited, but we believe it is important to warn of the possible risks rather than wait until there is total certainty.

Our clients are at the center of what we do, and we’re continuing to upgrade the protection of our products. One of the actions we are taking is the launch of NOW AI, a dedicated protection lab with a mission to raise the security standard across all ChangeNOW products. We want to apply the same technology to the defensive side to spot danger earlier and bake stronger security into our products, especially as AI makes malicious action easier to automate and expand.

Today’s case only made the need to move faster more obvious and it accelerated the launch of NOW AI. We’ll publish more details on our plans, what it covers, and how it will be used across ChangeNOW on a dedicated page on our website soon. Stay tuned. 

Disclaimer: The articles reposted on this website are sourced from public platforms and are for reference only. These articles do not represent the views or opinions of KCEX. All copyrights belong to the original authors. If you believe that any reposted article infringes upon the rights of a third party, please contact crypto.news@kcex.com for removal. KCEX makes no representations or warranties regarding the timeliness, accuracy, or completeness of reposted articles, and shall not be liable for any actions or decisions made based on such content. Reposted materials are for informational purposes only and do not constitute advice, endorsement, or basis for any commercial, financial, legal, and/or tax decisions.