ChangeNOW Fixes Website Flaw and Announces New Security Initiative

ChangeNOW fixed a vulnerability linking its support system to its website and announced NOW AI, while saying it had found no evidence that the flaw was exploited.

A white-hat security researcher helped identify the issue on Oct. 15. ChangeNOW said the flaw did not provide access to customer balances or assets, but email addresses and transaction details may have been exposed.

ChangeNOW warned that fraudulent messages could use genuine transaction or support details to look credible. It advised customers to watch for suspicious messages citing those details. The company's official emails come from support@changenow.io, and it will not ask for passwords, two-factor authentication codes, private keys or seed phrases.

NOW AI is a security initiative for ChangeNOW's products. Planned work includes AI-powered security analytics, ongoing testing and reviews of other third-party integrations. ChangeNOW plans to apply the tools to its own products and systems first, with wider availability a possibility. The company plans to share more details later.