The documentation provider used extensively by the cryptocurrency industry temporarily took its platform offline after discovering a security breach in its internal infrastructure. GitBook confirmed that the incident affected multiple customers, though it stated it has not yet determined if specific customer data was compromised during the unauthorized access.
The breach occurred Nov 2 and was described by the company as a “sophisticated” and “highly targeted” attack using AI agents. The attackers may have accessed integration tokens and Git sync secrets, as well as queries submitted to the GitBook Assistant. In response, GitBook revoked all personal API tokens and urged users to rotate their secrets, while clients including TradeXYZ reported suspicious activity on their hosted documentation.
