Warning to all builders on Replit: This platform does not have adequate safeguards to protect developers. My Replit account and the entire codebase I have spent the last 4 months building have been hijacked by a collaborator, Rishi Gupta of 25 Terawatts (ProSolv Ltd) based in Rugby England, who currently owes my company £4,630.00 in unpaid milestone invoices. It is completely unacceptable that an account I controlled can be accessed and stolen, leaving my business bank card attached to fund their unauthorized infrastructure costs. Replit’s lack of workspace ownership security and no multi-factor authentication allows malicious actors to lock out the primary creator with zero verification. This is unacceptable!
4 Likes
If replit staff cannot serve your situation, take it to the court and post the story online for people to see what is going on is what i would suggest, i ve seen countless discussions talking about this on other platforms aswell and to be fair it is something that happens to other people aswell, you need engineers to make it secured if you go for serious workflows this is something that has to be respected no matter your provider, the adequate safeguards need to atleast be prompted to the agent beforehand, replit provides some layers of it but the whole thought process needs to be designed by the builder nothing is secured “automatically”
Thanks for the response. Just to clarify, this isn’t about anything the Agent has built. That’s secure and there are no issues there. This is entirely about the Replit account itself and the fact that there is no MFA/2FA available to ensure that an account is safe and cannot be accessed by an unauthorised person. 2FA these days is a very basic security need from an information security point of view. It has to be dealt with urgently. Replit is a fantastic platform and they’ve done a great job with it but this is a fundamental requirement for security of accounts on any platform online.
2 Likes
This is alarming. And needs resolution. Primary account holder is primary and not collaborator.
For my projects for clients i ask them to add their payment cards to account. And i dont collaborate, i send them production links to test and give feedback. Hind sight I guess.
2 Likes
This is very bad and sad to hear that. I can understand how you feel, you should find some way with Replit to help you and grab that cheater.
That’s why I am very scared to collaborate not only cos with the full assets but could mess up my application.
Omg I can not imagine if my years of hard work is stolen.
Sorry to hear that man.
May God give you strength to come over from this situation.
1 Like
what is replit doing about this?
Firstly, I’m a huge fan of Replit and love how fast they move, but this is a massive oversight. Basic 2FA/MFA isn’t an optional feature anymore, it’s essential for protecting accounts, client work, and payment details.
No, I’m not aware of what Replit is doing behind the scenes to address it, but it needs to be made an immediate priority before more users are impacted.
1 Like