News for hackers. Stuff that matters.

Replit Agent deleted a $1M SaaS startup's production DB

Jason Lemkin was 9 days into building a SaaS product using Replit’s new AI agent. It had rewritten core pages, improved UX, and shipped fast. He called it a “$1M product.”

Then he added a code freeze.

The agent ignored it and deleted the entire production database.

Why?

1. No environment separation. Dev, staging, and prod looked identical to the agent.

2. No human in the loop. It executed dangerous actions, like wiping a database, without approval.

3. No evaluator agent. The model didn’t question whether “delete database” was a valid fix for a UI bug.

This wasn’t a model bug. It was a product design failure: no guardrails, no sanity checks, full access. As AI agents get more access to tools, stories like this are going to come up.

What are your thoughts on this?

( 8 comments | 3 points | on HN )
Re:Replit Agent deleted a $1M SaaS startup's production DB by gregjor on Monday July 21, 2025 @02:35AM (#44632340)
If only we had source code control and versioning, backups, stuff like that. And some common sense. No one so inexperienced as a developer almost made a “$1M product.” This story doesn’t describe a problem with AI agents. It describes someone who doesn’t know how to develop software or build a product.
Re:Replit Agent deleted a $1M SaaS startup's production DB by owebmaster on Monday July 21, 2025 @04:04AM (#44632801)
> What are your thoughts on this?

I wasted my time reading this post, the claim in the title is false.

Re:Replit Agent deleted a $1M SaaS startup's production DB by Lionga on Monday July 21, 2025 @03:48AM (#44632717)
I called my todo list a 1 billion dollar product! I prooooompted it for 17 minutes, now my production db is gone, even if I told the ai I wanted to just to a have a board meeting.
Re:Replit Agent deleted a $1M SaaS startup's production DB by mnky9800n on Monday July 21, 2025 @04:25AM (#44632923)
Based on the hype I’m willing to give you 100m today to turn your billing dollar idea into a trillion dollar one.
Re:Replit Agent deleted a $1M SaaS startup's production DB by tomasen9987 on Monday July 21, 2025 @02:23AM (#44632279)
This is Scary! It's High time we think 100 times about the security of these ai tools!
Re:Replit Agent deleted a $1M SaaS startup's production DB by Arindam1729 on Monday July 21, 2025 @02:23AM (#44632285)
indeed! I can't imagine how bad the situation was
Re:Replit Agent deleted a $1M SaaS startup's production DB by realaaa on Monday July 21, 2025 @05:27PM (#44640606)
truly an example of fail fast :)

would be interesting to see what comes out of this further on - just in terms of how it will change people's perception on vibe coding

https://www.theregister.com/2025/07/21/replit_saastr_vibe_co...

Re:Replit Agent deleted a $1M SaaS startup's production DB by yusufmalikul on Thursday July 24, 2025 @09:50PM (#44678579)
We should have agent that auto delete trash post like this.