ChainCatcher report: According to an official announcement from GitBook, the documentation platform commonly used by crypto projects disclosed that attackers leveraged AI agents to carry out a highly targeted attack, gaining access to certain infrastructure credentials at 2:00 AM Beijing time on November 3. Exposed data may include integration tokens, Git Sync keys, API tokens, and questions posed by website visitors to the GitBook Assistant. GitBook stated that no customer content has been found to be altered; all personal API tokens have been revoked and all credentials replaced. Related services were restored at 11:21 PM Beijing time on November 3. GitBook advises users to rotate their GitBook and third-party API tokens and keys, and to re-authenticate the GitBook MCP server. Previously, PancakeSwap temporarily took down its documentation hosted on GitBook due to this incident.
GitBook Suffers AI-Powered Attack, Recommends Users Rotate API Keys
ChaincatcherShare
Summary
On November 3, 2026, at 2:00 AM Beijing Time, GitBook reported an AI-powered breach in which attackers used AI agents to steal infrastructure credentials. Exposed data included integration tokens, Git Sync keys, API tokens, and user queries submitted to the GitBook Assistant. No content was modified, and all compromised tokens were revoked by 11:21 PM the same day. GitBook advised users to rotate their API keys and re-authenticate MCP servers. PancakeSwap had already removed its GitBook-hosted documentation. The incident underscores the convergence of AI and cryptocurrency news with on-chain developments.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.