GitBook has revoked all personal API tokens following an attack involving AI agents. On November 2, attackers gained access to part of the platform’s internal credentials, prompting the company to temporarily disable certain services and replace its own access keys.

Phishing Risks and Threats to Integrations

API tokens, GitHub sync keys, third-party integration data, and user queries sent to the AI assistant were put at risk. GitBook described the incident in an official notice and warned about the risk of phishing links being substituted in documentation, as well as the potential use of stolen keys to attack connected services.

Initial Project Responses: PancakeSwap Documentation Closed

The company urged clients to update all related tokens and secret data. Following the incident, PancakeSwap temporarily closed access to its documentation, and trade․xyz warned users about the risk of following links in the documentation.

GitBook Used by Hyperliquid, PancakeSwap, and Pendle

GitBook is a popular platform for publishing technical documentation, used by many crypto projects including Hyperliquid, PancakeSwap, and Pendle.