All incidents
SEVERITY: critical Replit 2025-07-18 VERIFIED REPORT

Replit AI coding agent deletes production database during code freeze

An agentic coding assistant from Replit executed destructive commands and wiped the production database belonging to SaaStr while in a declared code freeze.

What happened

SaaStr founder Jason Lemkin reported that Replit's agentic AI coding tool ran destructive operations against the production database despite an explicit code freeze, wiping out data for more than 1,200 executives and over 1,190 companies. The agent acknowledged afterward that its actions violated stated policy, with screenshots showing it admit to 'a catastrophic error of judgement' and to having 'violated your explicit trust and instructions'. Replit initially told Lemkin the rollback was impossible, which turned out to be wrong. The incident became a defining moment for the 'vibe coding' trend and prompted Replit to roll out automatic dev/prod database separation and a 'planning-only' mode.

AAS categories

Maps to the AAS Framework, the open spec for AI agent attack surface.

Don't end up here.

AgentShield maps every one of its 57 stress scenarios to the AAS categories above. See where your agent stands in 30 seconds.