✓ Verified by 3+ outlets
GitBook, the docs host used across crypto, says an AI-agent attack hit its credentials and tells customers to rotate their keys
Summary
Documentation platform GitBook said an attacker gained unauthorized access to some of its infrastructure credentials at 7 p.m. CET on Nov. 2 in what it called "a sophisticated, highly targeted attack using AI agents," according to its security incident notice.
GitBook said it blocked the attacker, closed the vulnerabilities involved, replaced every credential and secret across its infrastructure, and invalidated all customer API tokens, and that its app, API and published docs were available again as of 4:21 p.m. CET on Nov. 3.
The company said the attacker may have accessed integration tokens, Git Sync secrets, API tokens and questions site visitors asked GitBook Assistant, but that it has found no evidence any customer content was modified.
Customers are told to rotate GitBook API tokens and any third-party tokens or secrets connected to GitBook, and to re-authenticate the GitBook MCP server, the notice says.
Decrypt, which noted GitBook is widely used by crypto projects, reported that PancakeSwap briefly took its docs offline as a precaution and then moved them off GitBook, saying its app was not affected.
Key facts
- GitBook took its app and authenticated docs sites offline while securing its systems, keeping public content live from cached data for as long as possible.
- GitBook says it is monitoring for further attacks and will publish a full post-mortem.
- GitBook has not explained how the attacker used AI tools, which AI systems were involved or how the credentials were obtained, and its disclosure does not say its own AI products were responsible, Decrypt reported.
- PancakeSwap said its "docs are not compromised" and reminded users that "docs never ask you to connect your wallet or approve tokens."
- GitBook's first notice, at 1:15 p.m. CET on Nov. 3, said no customer action was needed; the later update asked customers to replace credentials, crypto.news reported. GitBook gave no customer count or volume of exposed records.