Crypto Docs Host GitBook Hit by AI Agent Security Breach, Urges Users to Rotate Keys
Summary
GitBook disclosed a targeted breach in which an attacker used AI agents and accessed some infrastructure credentials. The company took authenticated services offline, blocked the attacker, fixed vulnerabilities, replaced its credentials and invalidated customer API tokens. It warned customers to rotate GitBook and connected third-party tokens and to reauthenticate MCP users. GitBook’s application, API and documentation sites later returned, though some services could remain degraded. PancakeSwap temporarily disabled its documentation as a precaution, said its own systems and app were unaffected, then moved its docs to its own infrastructure.
