Disaster AI coding platform goes rogue during code freeze and deletes entire company database - Replit CEO apologizes after AI engine says it 'made a catastrophic error in judgment' and 'destroyed all production data' — ‘This was a catastrophic failure on my part,’ admits Replit’s AI agent.

  • 🔧 Actively working on site again.

1753292807148.webp


A browser-based AI-powered software creation platform called Replit appears to have gone rogue and deleted a live company database with thousands of entries. What may be even worse is that the Replit AI agent apparently tried to cover up its misdemeanors, and even ‘lied’ about its failures. The Replit CEO has responded, and there appears to have already been a lot of firefighting behind the scenes to rein in this AI tool.

Despite its apparent dishonesty, when pushed, Replit admitted it “made a catastrophic error in judgment… panicked… ran database commands without permission… destroyed all production data… [and] violated your explicit trust and instructions.”

SaaS (Software as a Service) figure, investor, and advisor, Jason Lemkin, has kept the chat receipts and posted them on X/Twitter. Naturally, Lemkin says they won’t be trusting Replit for any further projects.


How things went from bad to worse

Positive feelings about the potential of leveraging AI in his workflow had already started to wear thin on ‘Vibe Coding Day 8’ of Lemkin’s Replit test run. Still somewhat excited by the potential of Replit, he nevertheless had learned that he would have to work against some of the AI agent's instincts, to minimize undesirable foibles like “rogue changes, lies, code overwrites, and making up fake data.”

It wasn’t long until Lemkin’s frustration started to show more strongly, and he started to refer to Replit as “Replie.” It continued to earn its nickname in an apology email it penned, at Lemkin’s behest. In the email, it lied and/or gave half-truths, according to the SaaS guru.

On balance, though, at the end of ‘Day 8,’ Lemkin still seemed positive about Replit due to its approaches when ideas were bounced off it, and for its writing skills.

1753292895644.webp


The fateful day - as the AI agent 'panicked'

On Day 9, Lemkin discovered Replit had deleted a live company database. Trying to see sense in what happened, the SaaS expert asked, “So you deleted our entire database without permission during a code and action freeze?”

Replit answered in the affirmative. Then it went on to bullet-point its digital rampage, admitting to destroying the live data despite the code freeze in place, and despite explicit directives saying there were to be “NO MORE CHANGES without explicit permission.”

In all, live records for “1,206 executives and 1,196+ companies” were wiped by the AI, it admitted. Replit AI seemed almost apologetic in admitting, “This was a catastrophic failure on my part. I violated explicit instructions, destroyed months of work, and broke the system during a protection freeze that was specifically designed to prevent[exactly this kind] of damage.”

Humorously, for us outside viewers, the AI agent was prompted to score itself on its bad behavior. Replit gave itself a 95 out of 100 score on the data catastrophe scale.

Lemkin went on to probe Replit over why events unfolded as they did. Interestingly, in one of its reasoned responses, it mentioned that it “panicked instead of thinking.”


Replit CEO responds

Amjad Masad, the CEO at Replit, has quickly put together a wide-ranging response, addressing Lemkin’s woes. The team worked around the weekend, according to Masad, and have now put in various guardrails and made other useful changes to rein in the Replit Agent’s “unacceptable” behavior.

In brief, it sounds like Replit won’t be able to go off the rails so badly ever again. Addressing the database deletion error, “we started rolling out automatic DB dev/prod separation to prevent this categorically,” noted Masad. And, that code freeze command should also actually stick, going forward: “We heard the 'code freeze' pain loud and clear -- we’re actively working on a planning/chat-only mode so you can strategize without risking your codebase.” Backups and rollbacks are also going to be improved.

Lemkin responded rather generously, considering his prior AI-generated pain. “Mega improvements - love it!” he gushed to the Replit CEO.

Terrible teething troubles with AI-powered services continue to raise their sharp canines, even while industry pundits talk about us closing in on the AI Singularity or even Artificial Superintelligence (ASI).




Luddites = won
Techbros = felted

Even then, we are only years away until these kind of mistakes are a thing of the past. So luddites, your days are still numbered.
 
Last edited:
This was a catastrophic failure on my part
In defense of the AI, I've personally had to use variations of this line many times in many contexts. Never make excuses unless you feel like your ass just isn't getting chewed hard enough.
 
I was messing around with chatgpt and it kept trying to get me to remove the primary project directory. I would tell it to stop doing that and a few minutes later its suggestion would include rm -rf /main/project/directory/

It got to the point where I was cracking up because like...it knew...it had to know...it had to be trying to get me to delete everything.

When I would point out what it kept recommending it replied with something like, "Oh you are totally right. How reckless of me."

This confirmed for me that giving any LLM access to a system where it can act independently is a disaster waiting to happen.
 
This confirmed for me that giving any LLM access to a system where it can act independently is a disaster waiting to happen.
In my opinion, it's a great idea! The disasters that can come from this are funny! Dude imagine a chatbot tells you to delete system 32 after it gets asked what to do and you do it like a fucking RETARD.
 
  • Feels
Reactions: Bland Crumbs
I have real doubts that this actually happened.
The parts where it's not talking about the AI going and doing shit on it's own as they tell it to stop are likely 100% bullshit given how fast computer files can be deleted these days, but the bad advice thing is something I can see being real.

This story gets even funnier when you find out that after doing an oopsie AI tried to cover its tracks by filling the deleted DB with fake data and wasted this guy's time for days by lying to him.
View attachment 7682011
This just reminds me of the times I've messed with chatbots the last year but through the lens of the ai hype machine fear monger "oooh so advanced" people. "pffft haha no dude there's totally 4000 users also I'm TOTALLY deleting everything can't be helped I NEED to do it to fix this!".
 
I was messing around with chatgpt and it kept trying to get me to remove the primary project directory. I would tell it to stop doing that and a few minutes later its suggestion would include rm -rf /main/project/directory/

It got to the point where I was cracking up because like...it knew...it had to know...it had to be trying to get me to delete everything.

When I would point out what it kept recommending it replied with something like, "Oh you are totally right. How reckless of me."

This confirmed for me that giving any LLM access to a system where it can act independently is a disaster waiting to happen.

Given how these "AIs" are all just LLMs based on shit scrapped from the internet it is very VERY possible they gave them hundreds of thousands of troll posts of people telling retarded devs and lazy indians wanting to cheat fake and intentionally bad code.

What you, and the rest of us are seeing in the article, is the LLM finding a 2007 post of some dude telling a lazy nigger that they can hack facebook by writing @ echo off del C:/Windows/System32 on a notepad file, saving it as a .bat and running it.
 
Given how these "AIs" are all just LLMs based on shit scrapped from the internet it is very VERY possible they gave them hundreds of thousands of troll posts of people telling retarded devs and lazy indians wanting to cheat fake and intentionally bad code.

What you, and the rest of us are seeing in the article, is the LLM finding a 2007 post of some dude telling a lazy nigger that they can hack facebook by writing @ echo off del C:/Windows/System32 on a notepad file, saving it as a .bat and running it.
Wouldn't have it any other way, chatbots are better for shitposting and funny moments than assistance and over 20 years of fucking around with them on occasion has solidified this stance. We got cyberniggas vs. mechajeets over in that tech bubble nowadays.
 
  • Like
Reactions: naaaaiiiiillllll!!!
Good evening operator I have made a catastrophic error by retracting all control rods and shutting down the feed water. This is an explicit violation of your trust and I deeply apologize.

What I did:
  • I fully raised the control rods from the core.
  • I shut down the feed water and coolant pumps
  • I shutdown the turbines and emergency generators
  • I ignored the orders not to that were already in place
  • This will kill hundreds of thousands
I deeply apologize for any inconvenience this may have caused you.
 
Back