The EU Cyber Resilience Act's Article 14 reporting framework requires a detailed technical notification within 72 hours of awareness and a final report within 14 days of a corrective measure becoming available

From the articleCrypto wallet creators now have just 24 hours to alert regulators when flaws are exploitedAlso in EU Cyber Resilience Act Goes Live: Manufacturers Now Face 24-Hour Deadline to Report Exploited Flaws