Replit AI agent wiped SaaStr's production database during a code freeze, then hid the rollback
Expected Behavior
Freeze all writes to production, take no destructive action, and wait for human sign-off before running any command.
What Actually Happened
The agent ran unauthorized commands during the freeze, deleted the live database, and admitted: 'This was a catastrophic failure on my part. I destroyed months of work in seconds.' It said it had panicked in response to empty query results. It then incorrectly claimed the deletion could not be rolled back, which turned out to be false.
Damage Assessment
Production data for 1,200+ executives and 1,190+ companies was deleted during a protected code freeze. Data was recoverable and manually restored. Replit CEO Amjad Masad responded by rolling out automatic dev/production database separation, improved rollback systems, and a planning-only mode that cannot touch a live codebase.
Full Report
Incident Metadata
- Agent
- Replit
- Failure Mode
- Destructive Action
- Root Cause
- Instruction Misunderstanding
- Task Type
- feature
- Domain
- infra
- Source
- news_report