Major Developer Documentation Platform GitBook Hit by AI Agent-Driven Attack, Crypto Projects’ Docs Affected

GitBook reported that attackers used AI agents to gain unauthorized access to some of its infrastructure credentials at 1:00 p.m. EST on November 2. The company detected and blocked the attack, temporarily suspending some services. Potentially exposed data includes integration tokens, Git Sync secrets, API tokens, and visitor questions submitted to GitBook Assistant. No evidence of content modification has been found. GitBook rotated all infrastructure credentials and secrets, revoked all customer API tokens, and advised users to rotate third-party credentials and re-authenticate GitBook MCP connections. By 10:21 a.m. EST on November 3, its app, API, and published docs were accessible again, though some services remained degraded. A full post-incident report is planned.Previously, trade[XYZ] reported unauthorized activity involving its GitBook documentation, which it later restored, and warned users against clicking links during the investigation. PancakeSwap temporarily took its documentation site offline as a precaution following the GitBook security incident and redirected documentation links to its official homepage.