Vibe coding legal risks

Source: https://www.instagram.com/reel/Ddi5_OkoiDa/?stkn=MWVpZnN2a2NwbjhoNw==

AI generated summary of the linked source. Posted anonymously. Transcripts are published only for public links, never for uploads, documents or pasted text.

Your library

The AI link is plain markdown. Paste it into any assistant and it can read the whole public entry.

Summary

Vibe-coded apps built fast with AI tools like Claude carry hidden legal and financial landmines: DDoS-vulnerable static sites, accessibility violations, exposed databases, and unauthorized texting can trigger lawsuits and bills running from thousands to millions of dollars. The fix is cheap compared to the risk, but only if founders check for it before launch.

Core ideas

One context card plus 7 ideas

Static sites aren't free: Netlify bills per gigabyte, so a DDoS attack on a "free" static landing page can generate a $104,500 invoice overnight.
Accessibility gets ignored: Sites that can't be used with a keyboard or lack image alt text violate accessibility law, and over 5,000 such lawsuits were filed last year, mostly against small companies.
Database security defaults to open: Supabase free tier projects often ship with row-level security turned off on tables Claude generated, exposing the entire users table through the public key sitting in the site's JavaScript.
One in ten apps is exposed: That database misconfiguration isn't rare. It hits roughly 10% of vibe-coded apps.
Texting without consent is expensive: Messaging a waitlist about launch without written consent costs $500 per text under federal law, meaning 10,000 texts equals a $5 million exposure.
AI code can spiral costs: Claude-written functions that call themselves recursively can run up massive bills, and budget alerts don't stop execution once it starts.
Real cost example: A startup that tested a recursive function woke up to a $72,000 bill despite having budget alerts set.

Quotes

“If you've vibe-coded an app and don't want to get sued for $100,000, watch this.”
@adilet.fndr

“One static site got an invoice for $104,500.”
@adilet.fndr

“Anyone can read your whole users table with the public key that's already in your JavaScript.”
@adilet.fndr

“10,000 texts is $5 million.”
@adilet.fndr

“By the way, following me is the cheapest co-founder you'll ever hire.”
@adilet.fndr

Resources

Links to the tools, products, repos or reading this entry mentions. Found by a web search of what the entry names, so you can go and use them.

Anyone can run this once. After that the links are saved on this entry and shown to everyone.

Remix this knowledge

Turn this entry into something you can post. Pick a format and get a fresh, original rewrite.

Remixes are AI generated, original wording, and free to reuse.

Talk it through

Open a round table on this entry and argue with other people about what it means.

Start a round table

Drop your own

Paste any video, podcast or audio link and get the transcript, the core ideas and the quotes back in one pass.

Try Drop