Watch Out: A Cyberattack Has Occurred That Could Pave the Way for More Hacks in the Cryptocurrency Market

GitBook, widely used by cryptocurrency projects to publish technical documentation, announced that it was subjected to an advanced cyberattack using artificial intelligence (AI) agents. The company confirmed that attackers gained unauthorized access to some credentials belonging to its infrastructure and warned its users to renew their API keys and confidential information in related services.

According to a security statement published by GitBook on November 3, the attack occurred on November 2 at 9:00 PM (Turkish time). The company stated that some infrastructure credentials were compromised as a result of a sophisticated attack specifically targeting them.

GitBook reported that unauthorized access was immediately detected and the attacker was blocked. To ensure system security, GitBook temporarily shut down its application and documentation sites that require authentication. Publicly accessible documentation content was kept accessible through cached data whenever possible.

GitBook Cancels Users’ API Keys

According to the company’s initial investigations, the attackers may have gained access to integration tokens used through GitBook, confidential information in Git Sync connections, API tokens, and questions visitors posed to the GitBook Assistant.

However, GitBook emphasized that there is no evidence that documentation published on the platform has been altered by attackers.

The company announced that, as part of security measures, it has changed all credentials and secret keys across its infrastructure and has also invalidated customer API tokens.

GitBook has asked users to renew their API keys and other confidential information used to connect with third-party services. It also stated that those using the GitBook MCP server need to re-authenticate.

Security Alert for Cryptocurrency Projects

The fact that GitBook is used by numerous cryptocurrency and blockchain projects to publish technical documentation, developer guides, and API documentation makes this security incident significant for the industry as well.

Projects that integrate GitBook with third-party tools, in particular, need to check the access keys used on connected systems and perform any necessary renewal procedures.

Currently, there is no confirmed information indicating that the attack has directly resulted in fund losses for any cryptocurrency project or altered published documentation.

GitBook announced in its latest update that its application, API services, and published documentation are now accessible again. However, it noted that performance issues may persist in some services.