diff --git a/test/built-ins/RegExp/prototype/Symbol.replace/result-get-groups-err.js b/test/built-ins/RegExp/prototype/Symbol.replace/result-get-groups-err.js
new file mode 100644
index 0000000000..3e7947920f
--- /dev/null
+++ b/test/built-ins/RegExp/prototype/Symbol.replace/result-get-groups-err.js
@@ -0,0 +1,34 @@
+// Copyright (C) 2020 Alexey Shvayka. All rights reserved.
+// This code is governed by the BSD license found in the LICENSE file.
+
+/*---
+esid: sec-regexp.prototype-@@replace
+description: >
+  Abrupt completion during lookup of "groups"
+  property of the value returned by RegExpExec.
+info: |
+  RegExp.prototype [ @@replace ] ( string, replaceValue )
+
+  [...]
+  14. For each result in results, do
+    [...]
+    j. Let namedCaptures be ? Get(result, "groups").
+features: [Symbol.replace, regexp-named-groups]
+---*/
+
+var r = /./;
+var coercibleValue = {
+  length: 0,
+  index: 0,
+  get groups() {
+    throw new Test262Error();
+  },
+};
+
+r.exec = function() {
+  return coercibleValue;
+};
+
+assert.throws(Test262Error, function() {
+  r[Symbol.replace]('a', '$<foo>');
+});
diff --git a/test/built-ins/RegExp/prototype/Symbol.replace/result-get-groups-prop-err.js b/test/built-ins/RegExp/prototype/Symbol.replace/result-get-groups-prop-err.js
new file mode 100644
index 0000000000..9f4bbff218
--- /dev/null
+++ b/test/built-ins/RegExp/prototype/Symbol.replace/result-get-groups-prop-err.js
@@ -0,0 +1,62 @@
+// Copyright (C) 2020 Alexey Shvayka. All rights reserved.
+// This code is governed by the BSD license found in the LICENSE file.
+
+/*---
+esid: sec-regexp.prototype-@@replace
+description: >
+  Abrupt completion during lookup of value of "groups" object.
+info: |
+  RegExp.prototype [ @@replace ] ( string, replaceValue )
+
+  [...]
+  14. For each result in results, do
+    [...]
+    j. Let namedCaptures be ? Get(result, "groups").
+    k. If functionalReplace is true, then
+      [...]
+    l. Else,
+      [...]
+      ii. Let replacement be ? GetSubstitution(matched, S, position, captures, namedCaptures, replaceValue).
+
+  Runtime Semantics: GetSubstitution ( matched, str, position, captures, namedCaptures, replacement )
+
+  [...]
+  11. Let result be the String value derived from replacement by copying code unit elements
+  from replacement to result while performing replacements as specified in Table 54.
+  These $ replacements are done left-to-right, and, once such a replacement is performed,
+  the new replacement text is not subject to further replacements.
+  12. Return result.
+
+  Table 54: Replacement Text Symbol Substitutions
+
+  $<
+
+  1. If namedCaptures is undefined, the replacement text is the String "$<".
+  2. Else,
+    a. Assert: Type(namedCaptures) is Object.
+    b. Scan until the next > U+003E (GREATER-THAN SIGN).
+    c. If none is found, the replacement text is the String "$<".
+    d. Else,
+      i. Let groupName be the enclosed substring.
+      ii. Let capture be ? Get(namedCaptures, groupName).
+features: [Symbol.replace, regexp-named-groups]
+---*/
+
+var r = /./;
+var coercibleValue = {
+  length: 0,
+  index: 0,
+  groups: {
+    get foo() {
+      throw new Test262Error();
+    },
+  },
+};
+
+r.exec = function() {
+  return coercibleValue;
+};
+
+assert.throws(Test262Error, function() {
+  r[Symbol.replace]('a', '$<foo>');
+});