Can Bolt.new apps be hacked?

Yes, Bolt.new generates functional applications quickly, but the AI-generated code often lacks security hardening. Common vulnerabilities include missing authentication on API routes, absence of input sanitization, and insecure default configurations. Since Bolt.new prioritizes rapid prototyping, security concerns like XSS prevention and CSRF protection are frequently overlooked in the generated output. UNPWNED scans Bolt.new applications for these vulnerabilities and provides specific remediation steps.