The bug *is* acknowledged by PhantomPhreak; it's a disagreement in terminology: PhantomPhreak's point is that it is not a "security vulnerability" in the sense that the multi-sig bug in February was.

Beyond that, there is disagreement as to how it can be fixed. Please see: https://github.com/CounterpartyXCP/counterpartyd/pull/190 and  https://github.com/CounterpartyXCP/counterpartyd/issues/191.