GitBook brought its documentation platform back online after patching the vulnerabilities that allowed unauthorized access to its systems on Nov 2. The company said it has blocked the attacker and rotated its own infrastructure credentials, though it noted that some services may still experience performance degradation.
The attack began around 7:00 p.m. CET and was carried out using what GitBook described as sophisticated AI agents. While the company found no evidence that customer documentation was modified, it revoked all personal API tokens and warned that integration and Git sync secrets were potentially exposed. Following the breach, several cryptocurrency projects reported suspicious activity, and PancakeSwap moved its documentation to infrastructure it controls.
