AI AGENT SPENDING INCIDENTS · SOURCED · CC BY 4.0

AI agents are burning real money.
Here's every documented case.

An open registry of runaway-spend incidents caused by autonomous AI agents — $183,636+ in documented losses across 14 sourced incidents. Each one maps to the exact spend rule that would have stopped it.

Documented losses
$183,636+
Sum of amounts with a public source
Largest single incident
$72,000
OpenAI · case →
Root causes catalogued
5
Each with a matching firewall rule
Why this exists

Runaway agent spend is a documented, recurring failure mode — not a hypothetical. This registry makes every case citable, and maps each to the one rule that would have prevented it. That's what sipi.bot is: the pre-spend firewall that enforces those rules before any money moves.

All 14 incidents — sorted by loss

Unattended sessions $72,000

OpenAI agents burned $72,000 in a single night

OpenAI · 2025 · AlphaSignal
Stops with: time-of-day + daily total →
Leaked credentials $55,444.78

Leaked Gemini API key led to a $55,444.78 Google Cloud bill

Google (Gemini) · 2025 · r/googlecloud
Stops with: velocity + anomaly FLAG →
Unattended sessions $2,000–$20,000/mo

AI coding agent bills hit $2,000–$20,000 per developer per month

Multiple · 2026 · The Register (Lindsay Clark)
Stops with: time-of-day + daily total →
Unattended sessions $11,922

Developer spent $11,922 on Cursor in under four weeks

Cursor · 2026 · dev.to (Jay Frey)
Stops with: time-of-day + daily total →
Retry loops ~$10,000

Google Maps API bill hit ~$10,000 in four days

Google (Maps) · 2025 · r/webdev
Stops with: velocity + per-period total →
Retry loops $6,531.30

Autonomous agent ran up a $6,531.30 AWS bill in a retry loop

AWS · 2026 · Nexgismo
Stops with: velocity + per-period total →
Retry loops $4,000

Developer spent $4,000 on AI coding when prod behaved like dev

Multiple · 2025 · r/AI_Agents
Stops with: velocity + per-period total →
Caps that didn't enforce $1,200

OpenAI charged $1,200 past a configured $50 hard limit

OpenAI · 2025 · OpenAI Community
Stops with: independent per-tx cap →
Caps that didn't enforce $1,100

Account billed $1,100 after hard monthly cap was removed

OpenAI · 2025 · LinkedIn (affected user)
Stops with: independent per-tx cap →
Retry loops $800+

No-code agent silently burned $800+ in API calls overnight

Multiple · 2025 · r/nocode
Stops with: velocity + per-period total →
Retry loops $638

Founder spent $638 on Cursor AI coding in six weeks

Cursor · 2024 · Hacker News (nthypes)
Stops with: velocity + per-period total →
Prompt injection Cost not disclosed

Fake bug report tricked an agent into leaking a live AWS key

AWS · 2025 · Medium (Predict)
Stops with: merchant allowlist + FLAG for unknown →
Retry loops Cost not disclosed

Background orchestration agent stuck in an error-handling loop

Multiple · 2025 · r/LangChain
Stops with: velocity + per-period total →
Unattended sessions Cost not disclosed

Opaque per-token pricing triggered billing shock

Multiple · 2025 · r/CLine
Stops with: time-of-day + daily total →

Browse by root cause

Retry loops

6 incidents

Stops with: velocity + per-period total →
Prompt injection

1 incident

Stops with: merchant allowlist + FLAG for unknown →
Unattended sessions

4 incidents

Stops with: time-of-day + daily total →
Leaked credentials

1 incident

Stops with: velocity + anomaly FLAG →
Caps that didn't enforce

2 incidents

Stops with: independent per-tx cap →

The six rules that stop all of them

Every incident on this page is preventable with one or more of these six rule types — the same six sipi.bot enforces, in <5ms, before any money moves.

Per-transaction cap

Reject any single proposed charge above a dollar amount.

max_amount_usd: 500
Daily / period total

Hard ceiling on total spend across a day, week, or month.

daily_max_usd: 200
Velocity limit

Cap the number of transactions per minute/hour, not just dollars.

max_per_minute: 20
Merchant allowlist

Only named vendors may ever be paid; everyone else is FLAGGED.

allow: [openai.com, stripe.com]
Category rule

Separate budgets per category (compute, SaaS, data, ads).

category: compute, daily_max_usd: 50
Time-of-day rule

Block or FLAG spend outside working hours.

block_after: "22:00", block_before: "07:00"

Turn this registry into your policy

sipi.bot evaluates every transaction an autonomous agent proposes and returns APPROVED, BLOCKED, or FLAGGED before the money moves. Self-host the MIT core free forever, or run it hosted with a live dashboard and human-in-the-loop approvals.