Crypto Docs Host GitBook Hit by AI Agent Security Breach, Urges Users to Rotate Keys

What happened

In brief GitBook disclosed a targeted cyberattack involving AI agents (AI that carries out multi-step tasks rather than answering one question) that gave an attacker unauthorized access to some of its infrastructure credentials on November 2. The company says it has found no evidence that hosted content was modified.

GitBook, a documentation platform widely used by cryptocurrency projects, has disclosed a security breach involving AI agents that allowed an attacker to gain access to some of its infrastructure credentials, forcing the company to shut down services and revoke customer access tokens. Central European Time on November 2, according to GitBook, which said it detected the intrusion immediately and moved to contain it.

GitBook says attackers accessed infrastructure credentials in an AI-assisted breach, prompting a shutdown and emergency token resets. Decrypt News Technology GitBook says attackers accessed infrastructure credentials in an AI-assisted breach, prompting a shutdown and emergency token resets.

Potentially exposed information contains API (the interface one piece of software uses to talk to another) tokens (the small pieces of text a model reads and writes), integration secrets, and questions submitted to GitBook's AI assistant. GitBook revoked personal API tokens and urged customers to replace connected credentials.

Crypto exchange PancakeSwap temporarily took its documentation offline before moving it away from GitBook. In a security disclosure published today, the company described the incident as “a sophisticated, highly targeted attack using AI agents.”

The attacker gained unauthorized access at 7 p.m. The reference to AI agents is significant.