Documentation platform GitBook hit by AI-agent attack, resets all API tokens
The gist
Documentation platform GitBook said an attacker accessed some infrastructure credentials and it reset every customer's API tokens.
Crypto and Web3 projects hosting docs on GitBook must rotate keys.
How it unfolded
- Nov 2, 2026trade.xyz detected unauthorized activity affecting its GitBook documentation in the morning and said the documentation was fully restored by 9:15 a.m. ET; users were told not to click links while the investigation continued.
- Nov 2, 2026 19:00 CETAn attacker gained unauthorized access to some of GitBook's infrastructure credentials; GitBook said it detected the attack immediately and blocked further impact.
- Nov 2, 2026GitBook took the GitBook app and authenticated docs sites offline, keeping publicly published content live as long as possible using cached data.