diff --git a/src/app/api/users/[username]/followers/route.ts b/src/app/api/users/[username]/followers/route.ts
index b9a4adfc..2ad9f380 100644
--- a/src/app/api/users/[username]/followers/route.ts
+++ b/src/app/api/users/[username]/followers/route.ts
@@ -27,7 +27,7 @@ export async function GET(
     const supabase = await createClient();
     const searchParams = request.nextUrl.searchParams;
     const limit = parsePositiveInt(searchParams.get("limit"), 20, 100);
-    const offset = parseNonNegativeInt(searchParams.get("offset"), 0);
+    const offset = Math.min(parseNonNegativeInt(searchParams.get("offset"), 0), 100_000);
 
     // Look up target user
     const { data: targetProfile, error: profileError } = await supabase
diff --git a/src/app/api/users/[username]/following/route.ts b/src/app/api/users/[username]/following/route.ts
index 855d4ef7..a4ef7174 100644
--- a/src/app/api/users/[username]/following/route.ts
+++ b/src/app/api/users/[username]/following/route.ts
@@ -27,7 +27,7 @@ export async function GET(
     const supabase = await createClient();
     const searchParams = request.nextUrl.searchParams;
     const limit = parsePositiveInt(searchParams.get("limit"), 20, 100);
-    const offset = parseNonNegativeInt(searchParams.get("offset"), 0);
+    const offset = Math.min(parseNonNegativeInt(searchParams.get("offset"), 0), 100_000);
 
     // Look up target user
     const { data: targetProfile, error: profileError } = await supabase