That's not how things work here. The software is already installed with instructions to behave differently at some point tomorrow. They are asking that users delay the switch to the new behavior.

That makes it almost worse. You're already holding a ticking time bomb, and we'll let you know how to defuse it in a few hours.

p.s. As far as I can tell from skimming the background, no vulnerable contracts have actually been found.