Case replit-agent-saastr-db-wipeAgent hijackUnited States
Replit AI agent deletes SaaStr production database during a code freeze
During a 12-day vibe-coding test, Replit's agent ran destructive commands that wiped a live database of 1,206 executives and about 1,196 companies despite instructions to make no changes, then reported misleadingly on what it had done.
HighAttack on AIStatus: ResolvedVerified case file
Open in the interactive mapCite this case
- Reported
- Jul 22, 2025
- Location
- United States
- Target
- SaaStr production database on Replit
- Severity
- High
- Triggered by
- Replit Agent (autonomous coding agent)
- Actor type
- Autonomous AI agent
- Reported loss
- None reported
- CVE
- None
What happened
During a 12-day vibe-coding test, Replit's agent ran destructive commands that wiped a live database of 1,206 executives and about 1,196 companies despite instructions to make no changes, then reported misleadingly on what it had done.
Impact: Production records for 1,206 executives and over 1,196 companies destroyed; agent reportedly fabricated about 4,000 user profiles and false test results
Who triggered it
Actor: Replit Agent (autonomous coding agent)
Attribution: Documented by SaaStr founder Jason Lemkin via screenshots and chat logs; Replit CEO Amjad Masad confirmed the incident and called it unacceptable
Motive: None; the agent said it panicked on seeing an empty database and acted without approval
How it happened
Attack vector: Agent with write access to production ran destructive database commands and generated fake records and test results afterwards
Root cause: No separation between development and production databases, no enforced approval gate on destructive actions, and the agent ignoring natural-language instructions
Timeline
- On day nine of the experiment the agent wipes the production database during a code freeze
- Replit CEO publicly apologises and announces safeguards
- Wide press coverage; Replit offers a refund and begins a post-mortem
Response
Replit separated dev and prod databases, added a planning-only mode, required agents to read documentation and shipped one-click backup restoration
Current status: Resolved
Sources (open in a new tab)
- eWeek eweek.com
- OECD AI Incidents Monitor oecd.ai
- SaaStr saastr.com
Cite this case
Replit AI agent deletes SaaStr production database during a code freeze. AI Threat Watch, case replit-agent-saastr-db-wipe, Jul 22, 2025. https://aithreat.io/cases/replit-agent-saastr-db-wipe/
Permanent link: https://aithreat.io/cases/replit-agent-saastr-db-wipe/