· Luca Moretti
Vibe coding, one year on: faster code, more flaws
Collins made “vibe coding” its Word of the Year 2025. The studies since then say the code ships faster and breaks more often.
Andrej Karpathy coined “vibe coding” in February 2025: describing what you want and letting an AI write the code. Collins English Dictionary named it Word of the Year 2025.
What the studies found
- May 2025: 170 of 1,645 apps built with Lovable had a flaw that exposed personal data.
- October 2025, Veracode: models got much better at code that works, not at code that is secure.
- December 2025, CodeRabbit, 470 pull requests: AI co-authored code had about 1.7× more major issues and 2.74× more security issues.
- July 2025, METR trial: experienced developers were 19% slower with AI tools while believing they were 20% faster.
If you built your app this way
It may be fine. Before real customers and real payments arrive, have someone read it: login, access rules, what the database exposes, where secrets are stored. A short review costs less than a leak.