Documentation platform GitBook, widely used by crypto projects for their docs, was hit by a targeted cyberattack that made use of AI agents. According to its official incident notice, an attacker gained unauthorized access to part of its infrastructure data on November 2 at about 19:00 Dutch time, and GitBook temporarily took its app and protected documentation sites offline.
Data that may have been viewed includes integration tokens, Git Sync secrets, personal API tokens and questions users asked GitBook Assistant. GitBook says it has no indication that published content was altered. It has revoked all personal API tokens and replaced its own infrastructure secrets. Customers who linked GitBook to other services must rotate external API tokens and secret integration data, and users of GitBook’s MCP server have to reconfirm their connection.
The app, API and published documentation sites were reachable again on Tuesday, though the status page still listed issues with SSO login and protected sites.
For crypto teams, the risk goes beyond the docs themselves. A stolen token can give access to linked services such as code repositories, depending on its permissions, and documentation often contains contract addresses and official links that attackers could abuse. Crypto Insiders advises projects to check the addresses and links in their docs and to review connected accounts. The entry point and the number of affected organizations remain unknown until GitBook publishes a full incident report.
Track the market yourself with AiTraderView’s FREE tools: Crypto Cockpit for charts and 75+ indicators, Crypto Screener to find setups, and Crypto Portfolio to follow your holdings. Just create a FREE account and try them yourself!
Sources:
⚠️ RISK WARNING & AI DISCLOSURE
- This information is generated by Artificial Intelligence (AI) and complex algorithms. While advanced, these systems can contain errors or inaccuracies and are for educational purposes only.
- Technical analysis provides no guarantees; this information is purely informative.
- All discussed scenarios are hypothetical and do not constitute predictions or expectations.
- Past performance is not an indicator of future results.
- This is not financial advice and is not intended as a call-to-action for the reader.
- No implicit direction is claimed, and no specific behavior of market participants is suggested.