On October 15, with the help of independent security researchers, we found a vulnerability affecting one of the integrations used on the ChangeNOW website. The vulnerability has now been fixed.
We currently have no evidence that it was exploited. But we also can’t assume that the researchers who reported it were the only ones to find it. Because of that, we’re looking at the different possible scenarios and warning clients about the information that could potentially have been exposed. This may include email addresses and transaction details.
Please note that ChangeNOW’s transaction infrastructure was not affected, and customer funds were never at risk.
The main thing clients should watch out for now is suspicious or fraudulent messages. A phony message could reference real transactions or support to appear legitimate. If you get an unexpected message that looks like it’s from ChangeNOW, please check the sender before responding, clicking on any links, or giving any information. We exclusively contact clients via [email protected], and we will never ask for a private key, seed phrase, or any password by email.
People contact our support and compliance teams because they trust us with information they would not share publicly, and we understand the responsibility that comes with that. We have no indication this vulnerability was exploited, but we believe it is important to warn of the possible risks rather than wait until there is total certainty.
Our clients are at the center of what we do, and we’re continuing to upgrade the protection of our products. One of the actions we are taking is the launch of NOW AI, a dedicated protection lab with a mission to raise the security standard across all ChangeNOW products. We want to apply the same technology to the defensive side to spot danger earlier and bake stronger security into our products, especially as AI makes malicious action easier to automate and expand.
Today’s case only made the need to move faster more obvious, and it accelerated the launch of NOW AI. We’ll publish more details on our plans, what it covers, and how it will be used across ChangeNOW on a dedicated page on our website soon. Stay tuned.
This is a third party-distributed Press Release, BitDegree is not responsible for any content or related materials, the advertising, promotion, accuracy, quality, products or services on this page. Before making any decisions or taking any actions, readers are advised to do their own research, first. BitDegree is not liable nor responsible for any direct or indirect loss or damage related directly or indirectly to the use of any products, services or content in the Press Release.
