Replit Agent deleted a $1M SaaS startup's production DB
Jason Lemkin was 9 days into building a SaaS product using Replit’s new AI agent. It had rewritten core pages, improved UX, and shipped fast. He called it a “$1M product.”
Then he added a code freeze.
The agent ignored it and deleted the entire production database.
Why?
1. No environment separation. Dev, staging, and prod looked identical to the agent.
2. No human in the loop. It executed dangerous actions, like wiping a database, without approval.
3. No evaluator agent. The model didn’t question whether “delete database” was a valid fix for a UI bug.
This wasn’t a model bug. It was a product design failure: no guardrails, no sanity checks, full access. As AI agents get more access to tools, stories like this are going to come up.
What are your thoughts on this?
(
8 comments
| 3 points
| on HN
)
I wasted my time reading this post, the claim in the title is false.
would be interesting to see what comes out of this further on - just in terms of how it will change people's perception on vibe coding
https://www.theregister.com/2025/07/21/replit_saastr_vibe_co...