On October 15, 2026, ChangeNOW announced that it had discovered and fixed a vulnerability affecting one of the integrations used on its website. The issue was identified with the help of independent security researchers, according to a statement from Kingstown, Saint Vincent and the Grenadines.
The company said it has no evidence the vulnerability was exploited, but it cannot assume the reporting researchers were the only ones to find it. As a result, ChangeNOW is warning clients that information including email addresses and transaction details may potentially have been exposed.
ChangeNOW emphasized that its transaction infrastructure was not affected and customer funds were never at risk. The primary concern is that malicious actors could use exposed transaction details to craft more convincing phishing messages. Clients are urged to verify senders before responding, clicking links, or sharing information. The company said it only contacts users via support@changenow.io and will never request private keys, seed phrases, or passwords by email.
In response, ChangeNOW is accelerating the launch of NOW AI, a dedicated protection lab aimed at raising security standards across all ChangeNOW products. The company said the lab will apply defensive technology to spot dangers earlier and strengthen security as AI makes malicious actions easier to automate. More details are expected on a dedicated page soon.
ChangeNOW describes itself as a crypto super app offering storage, swaps, trading, staking, and asset management to millions of clients since 2017.
