Skip to content

Documentation Platform GitBook Hit by AI Agent Attack, Advises Users to Rotate API Keys

Nov 4, 01:24

November 4 — According to an official GitBook announcement, GitBook, a documentation platform commonly used by crypto projects, disclosed that attackers used AI agents to launch a highly targeted attack and obtained some of its infrastructure credentials at 2:00 a.m. Beijing time on November 3. Integration tokens, Git Sync keys, API tokens, and questions that website visitors submitted to GitBook Assistant may have been leaked. GitBook said it has not found any tampering with customer content, has revoked all personal API tokens and replaced all credentials, and that related services were restored at 23:21 Beijing time on November 3. GitBook advises users to rotate GitBook and third-party API tokens and keys and to re-authenticate the GitBook MCP server. Previously, PancakeSwap had temporarily taken offline its documentation hosted on GitBook due to the incident.