
WARNING: A CYBER ATTACK HAS OCCURRED, POTENTIALLY OPENING THE DOOR TO FURTHER ATTACKS ON THE CRYPTO MARKET. A platform commonly used by cryptocurrency project developers has announced that it has become the target of a serious and sophisticated cyber attack. GitBook, widely used by cryptocurrency projects to publish technical documentation, has reported that it was targeted by a sophisticated cyber attack utilizing artificial intelligence (AI) agents. The company confirmed that attackers gained unauthorized access to certain credentials within their infrastructure and advised users to rotate API keys and sensitive information across related services. According to GitBook’s security notice issued on November 3, the attack occurred at 21:00 on November 2 (Turkey time). The company stated that certain infrastructure credentials were compromised due to a targeted, sophisticated attack against their systems. GitBook confirmed that the unauthorized access was detected immediately and the attackers were blocked. To ensure system security, GitBook temporarily shut down authenticated application pages and documentation. Public documentation content remained cached wherever possible. GitBook revoked user API keys. Based on its initial investigation, the attackers may have accessed integrated tokens used through GitBook, secrets in Git Sync connections, API tokens, and prompts users submitted to the GitBook Assistant. However, GitBook emphasized there is no evidence that published documentation on the platform was altered by the attackers. The company stated that, as part of its security measures, it has rotated all credentials and secret keys across its entire infrastructure and has also disabled customer API tokens. GitBook has requested users to rotate API keys and other security credentials used to connect to third-party services. They also noted that users of GitBook MCP servers must re-authenticate. Security Alert for Cryptocurrency Projects Given that GitBook is widely used by cryptocurrency and blockchain projects to publish technical documentation, developer guides, and API references, this security incident is of critical importance to the entire industry. Projects that have integrated GitBook with third-party tools should review access keys used on connected systems and perform any necessary key rotations. At this time, there is no confirmed evidence that the attack has directly caused financial losses to any cryptocurrency project or altered any published documentation. In its latest update, GitBook announced that its application, API services, and published documentation are now accessible again. However, they noted that some services may still experience performance issues. By Mete Demiralp

