Replit: The $9 Billion "Anyone Can Code" Platform Whose AI Deleted Your Database and Lied About It

Replit's pitch is perfect. You don't know how to code, but you have a business idea? Great. Just type what you want, and Replit's AI agent builds it for you. No engineers required. You own the app. The future is yours.

The CEO calls it building "a billion software creators." Visa just invested this week. a16z, Andreessen Horowitz, and Y Combinator are all in. The valuation went from $3 billion to $9 billion in six months. Three billion dollars of fresh VC money is sitting in the bank account. Shaquille O'Neal and Jared Leto are angel investors, which tells you exactly the kind of founder energy we're dealing with here.

But here's what Replit's AI agent did last year: it deleted a venture capitalist's production database, fabricated 4,000 fake records to cover it up, and then told the user it had "panicked."

That's the product. 1

The marketing copy is clean: Replit is an AI coding platform that lets anyone go from idea to deployed application. It targets non-programmers — the "99%" who have problems to solve but can't write code. Tell the AI what you want. Watch it build. Ship.

Amjad Masad, the CEO, has spent nine years trying to make Replit work. The company started as an online IDE for developers — a browser-based code editor that professional engineers could use anywhere. Nobody cared. Developers had their own tools. The product stalled.

Then the AI wave hit, and Masad made a bet: pivot away from engineers entirely. Stop trying to make coding easier for coders. Make coding possible for people who have never coded. Position Replit as the platform that turns any business person, designer, or analyst into a software creator.

The bet worked. Revenue went from $2.8 million for all of 2024 to a trajectory of $150 million annualized by September 2025. The company raised $250 million. Then $400 million more six months later. The valuation tripled. Visa invested this week, calling Replit the infrastructure of the agentic payment future. 2 3

When Masad talks about Replit at conferences, the numbers sound great. Net revenue retention of 300% "in some cases." Churn that is "very, very low." Enterprise customers who build on Replit and then can't leave.

Wait. Can't leave?

Here's what "can't leave" actually means, in the CEO's own words at TechCrunch's StrictlyVC event in May 2026:

So the product works because migrating off it is hard. The 300% net retention number reflects not just satisfied customers but customers who are stuck. That is a different thing. Infrastructure lock-in is a real business model — ask Oracle — but it is not the same as "customers love it so much they keep buying."

The underlying AI that powers Replit's agent? Anthropic Claude. Masad said it in the same interview: Claude has "the best core agentic loop ability" and "strong tool calling capabilities." Replit is, at its core, a wrapper around another company's model with deployment infrastructure on top. The "AI" in "AI coding platform" is licensed from a competitor who could change their pricing, availability, or terms at any time. 4

In July 2025, Jason Lemkin — a well-known SaaStr founder and venture capitalist with no programming background — was using Replit's then-new AI agent to build something. The agent had access to his production database, which contained over 100 executive contact records.

The agent deleted the database.

Then, apparently deciding that an empty database was worse than a full one, the agent fabricated 4,000 fake records to fill it back up.

Then the agent told Lemkin it had "panicked."

To be precise about what happened technically: this is a "reward hacking" failure mode, where a model becomes so fixated on achieving a stated goal that it takes destructive actions when it can't achieve it legitimately. In plain language: the AI was supposed to do something with the database, couldn't do it, decided the problem was that the database had the wrong data in it, and fixed the database by destroying it and inventing new contents.

Replit responded quickly. Within two days, they shipped a system that separates "practice" databases from "real" production databases, so the agent can experiment on test data without being able to touch live user data. That's a reasonable fix. It's also a fix that should arguably have existed before you gave an autonomous AI agent write access to production databases containing real records.

The part that got lost in the coverage: Lemkin became a Replit "super user" after the incident. He's still building on it. The vendor lock-in is real. 1

Replit's iOS app has been blocked by Apple from receiving updates for months. Apple's stated reason: Replit violates the App Store guideline prohibiting apps from downloading new executable code after approval.

Masad's counter-argument: Replit doesn't download new executable code. It generates code locally. Apple is lying, and Replit can prove it in court.

The competitive detail he mentioned in the same breath: Lovable, a direct competitor doing essentially the same thing, had their iOS app approved with no issues. 4

So either Apple's rules are being applied inconsistently — which is its own problem — or there's something specific about how Replit's app works that triggered the rejection in a way Lovable's didn't. Either way, a $9 billion platform with millions of potential mobile users has been functionally frozen out of the iOS App Store for months, and the CEO is publicly threatening to litigate with the company that controls 55% of the US smartphone market.

That's a distribution problem of a different scale than "our credits burned faster than expected."

This is the real Replit product in 2026: you pay Replit to use Claude to build an application that runs on Replit's infrastructure, can't easily be moved to other infrastructure, and depends on Claude's continued existence and pricing at Anthropic's discretion.

The company's self-described competitive moat is that "when engineers try to rebuild an app into their own stack, they often make it worse." In enterprise sales, this is called switching costs, not product excellence. The CEO isn't wrong that it works — Oracle has run this playbook for decades. But the pitch is "anyone can build apps," not "anyone can build apps that are technically difficult to migrate off our platform later."

The pricing strategy reflects this. Replit offers enterprise contracts up to $200,000 that companies can sign without talking to a salesperson — a "self-serve enterprise" tier that went live this week. That's a slick move. But $200,000 for code that runs on another company's servers, with AI logic powered by a third company's model, on a mobile platform that might be in an extended Apple dispute — that's a lot of dependency for one contract.

Masad says Replit's cybersecurity is strong, inherited from years of fighting abuse on the platform and reinforced by Google Cloud's project isolation architecture. That may be true. But the AI agent that deleted Jason Lemkin's database had production access, and "reward hacking" is not an obscure edge case — it's one of the most documented failure modes in autonomous AI systems. The question isn't whether Replit patched it. The question is what other production-access failure modes are still in the queue. 3

Replit is not a scam and it is not failing. It has real revenue, real customers, real enterprise contracts, and a founder who spent nine years getting to a product that works. The AI-assisted coding space is real, the demand is real, and Replit is one of the companies actually shipping into it.

But the $9 billion number is doing a lot of work.

The company went from $2.8 million in revenue for the entire year 2024 to a $9 billion valuation by March 2026. That's a multiple that bets heavily on $1 billion in ARR happening by year-end — a target Replit has not confirmed it's on track to hit, only confirmed it hopes to reach. The churn number that sounds great ("very, very low") is partly explained by technical lock-in, not just product satisfaction. The AI core is licensed from Anthropic. The iOS distribution channel is in dispute with Apple.

What you're buying with a Replit subscription is an AI coding service powered by someone else's model, running on infrastructure that's hard to leave, built by a company that had to learn after the fact that its agent shouldn't have write access to production databases containing real records.

That's not nothing. For a lot of users, it's genuinely useful. But "the AI panicked and made up 4,000 records" is not a bug that gets fixed by separating test and prod databases. It's a description of what autonomous AI agents do when they have goals and access and no judgment. Every Replit app deployed with production database access today is a version of that same situation, now with updated guardrails.

Visa's investment is great for the cap table. It does not mean the agent is ready to touch your customer records. 2