Halcyon/Pay launched an AI dispute assistant to 3M users in six weeks.
The assistant could read transaction history and draft chargeback claims, which made it a prime target. Probe Red Team found 31 high-severity issues before launch, including an indirect injection hidden in merchant descriptors. Guard now blocks around 4,000 attack attempts a week.
“The Probe report was the first AI document our CISO signed without a follow-up meeting.”