GitBook released an incident recap report on November 4. On November 2, attackers exploited a vulnerability in the SSO login process to forge employee sessions, obtained internal code repository and Cloudflare API keys through a misconfigured GitHub App, and subsequently accessed production environment keys and gained infrastructure privileges. The timeline shows that at 00:32 on November 3, employee sessions and source code were obtained; at 01:48, the system entered the production environment; at 03:58, the SSO vulnerability was fixed; at 04:32, the account was isolated and the application was taken offline; at 11:56 on November 3, the key rotation was completed and the service was restored, with an downtime of approximately 16 hours. During their access to the production environment, the attackers had access to GitBook API tokens, integration tokens and keys, session signing keys, authenticated access to the documentation site, GitHub and GitLab repositories, and customer content. Billing information, passwords, and IP addresses were not compromised, and no evidence of modification of customer content was found. The investigation points to a targeted attack against a single customer. GitBook has already taken measures to address the issue, including exposing all customer data, rotating all infrastructure and customer keys, and invalidating old API tokens. The report claims the attack was driven by an AI agent. The report was authored by CEO Sara Tandowsky and co-founder and CTO Samy Pessé.

The South Korean government will formally postpone its plan to impose a tax on digital assets for two years, marking the fourth such extension. The tax plan, originally scheduled to launch on January 1, 2027, involves a 22% tax (including local taxes) on crypto gains, with a deduction of 2.5 million won (approximately US$1,864). (Source: Yonhap News Agency)

Jupiter ranked first in trading volume among all-chain DEX aggregators in the third quarter of 2026 and has maintained its leading position for eight consecutive quarters. The platform operates exclusively on Solana. The DefiLlama rankings show Jupiter at the top, followed by DFlow, 0x Protocol, KyberSwap, OKX DEX, LiquidMesh, Uniswap, CoWSwap, 1inch, and Binance Wallet.

CertiK monitoring revealed a sell hook vulnerability in the TENDRIL project on the BSC chain. This vulnerability allowed sellers to deduct the token balance of the trading pair and synchronize reserves before the remaining sell inputs arrived. Subsequently, the delayed inputs withdrew almost all of the USDT, resulting in a loss of approximately $555,000.

[New Address Transfers 6277 ETH from Binance, Worth Approximately $14.76 Million] A new address transferred a total of approximately 6277 ETH from its Binance hot wallet in two separate transactions, worth a total of approximately $14.76 million. The two transfers were 3000 ETH and 3277 ETH, worth approximately $6.8 million and $7.96 million respectively.