Skip to main content

2 posts tagged with "Vibe Coding"

AI-generated code and vibe coding security risks

View All Tags

What Vibe Coding Actually Costs: The Honest Math Nobody Is Publishing

· 33 min read
Dhayabaran V
Barrack AI

Vibe coding a prototype costs $40/month. Running it as a real business costs $6,000 to $32,000 in Year 1. Traditionally, hiring a contractor or agency to build the same MVP would cost $30,000 to $150,000. The gap between the $40 prototype and the $6,000+ production product is where most vibe-coded projects die, and almost nobody is publishing the honest math that fills it. Matt Shumer's essay "Something Big Is Happening" hit 80 million views on X in under a week. Andrej Karpathy, the man who coined "vibe coding," later admitted he hand-coded his most ambitious project because AI tools were "net unhelpful." Collins Dictionary named vibe coding its 2025 Word of the Year. MIT Technology Review listed Generative Coding among its 2026 Breakthrough Technologies. Stack Overflow's 2025 survey of 49,000+ developers found 84% are now using or planning to use AI coding tools. The tools are real. The revolution is real. But the costs between prototype and production are where the truth lives, and that is what this post breaks down, dollar by dollar.

Every AI App Data Breach Since January 2025: 20 Incidents, Same Root Causes

· 29 min read
Dhayabaran V
Barrack AI

Between January 2025 and February 2026, at least 20 documented security incidents exposed the personal data of tens of millions of users across AI-powered applications. Nearly every single one traces back to the same preventable root causes: misconfigured Firebase databases, missing Supabase Row Level Security, hardcoded API keys, and exposed cloud backends.

This is not a collection of isolated mistakes.

Three independent large-scale research projects, CovertLabs' Firehound scanning 198 iOS apps, Cybernews' audit of 38,630 Android AI apps, and Escape's analysis of 5,600 vibe-coded applications, all converge on the same conclusion: the AI app ecosystem has a systemic, structural security crisis. The rush to ship AI wrappers, chatbots, and "vibe-coded" products has outpaced even the most basic security practices, leaving hundreds of millions of user records readable by anyone with a browser.

What follows is every documented incident, research finding, and industry statistic. Sourced, dated, and cross-referenced.