It depends on the nature of the exploit. For privacy flaws that are already permanently recorded on the blockchain itself, no fix is possible, and "responsible disclosure" (aka deliberately withholding information from the public) serves no purpose other than to manipulate markets, as othe indicated.