AI Agents Breach GitBook; PancakeSwap Moves Docs Off Platform

GitBook, the documentation platform used by many crypto projects, has disclosed a security breach. The company says an attacker gained unauthorized access to infrastructure credentials on Nov. 2 at 19:00 CET (1:00 p.m. ET), in what it called a sophisticated, highly targeted attack using AI agents, as Decrypt reported. The service was taken offline as a precaution and was restored at 16:21 CET on Nov. 3 (10:21 a.m. ET).

Details

According to GitBook's incident page, potentially exposed data includes integration tokens, Git Sync secrets, API tokens and questions that site visitors asked the GitBook Assistant. The company says it found no evidence that any content was modified. It blocked the attacker, closed the vulnerabilities, replaced every credential and secret across its infrastructure and invalidated all customer API tokens. The first notice went out on Nov. 3 at 13:15 CET (7:15 a.m. ET).

Customers are told to rotate their GitBook API tokens and any third-party tokens or secrets that connect other tools to GitBook, rotate secrets in published integrations, and re-authenticate the GitBook MCP server if they use it.

Decentralized exchange PancakeSwap said its documentation and app were not compromised, but took its docs offline as a precaution. It later brought them back on its own infrastructure at docs.pancakeswap.finance and reminded users that docs never ask them to connect a wallet or approve tokens.

What this means for the market

No user fund losses have been reported. The risk is indirect: project docs are a common place to find contract addresses and official links, so tampered content could feed phishing. GitBook says it has seen no modifications, but teams that tie CI pipelines and integrations to the platform should check their keys.

For the bitcoin price, see the daily brief; the token page is PancakeSwap.