How my private Lovable App Generated a $4,000 Bill in ~2 Hours
A single browser tab got stuck in a reload/re-render loop and continuously triggered API and database requests.
This wasn't a traffic spike, bot attack, or viral launch.
Before I caught it, the app had generated:
• 3M+ total requests
• 1M+ database requests
• ~$4,000 in charges
What caught me off guard was how fast it happened.
I've used Claude Code and Codex extensively and haven't run into this type of issue because I can review changes before they ship.
Lovable's fully autonomous approach is cool, but it also means you need to be extra careful with live APIs, public pages, and auto-triggered actions.
Lessons learned:
• Don't auto-run expensive API calls on page load
• Watch for re-render/reload loops
• Add quotas and budget alerts from day one
• Cache aggressively
• Assume a single tab can generate real costs
Sharing this so others hopefully don't learn the same lesson.