Changelly documentation:

 

docs.google.com

 

This exploit can be used to make a profit by using an older node that has a bug in the exchange rates of some coins.

 

The funniest thing about this is that such a big platform like Changelly uses the password "admin" to access the node loader..