diff --git a/SECURITY.md b/SECURITY.md
index fdb708c18aaa..a10b0c245819 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -7,7 +7,6 @@ We have a 3 month release cycle, and the last two versions are supported.
 ## Reporting a Vulnerability
 
 To report security vulnerabilities, please send an email to one of the following addresses:
-- `rusty@rustcorp.com.au`
 - `security@blockstream.com`
 
 Note: These email addresses are exclusively for vulnerability reporting.
diff --git a/doc/contribute-to-core-lightning/release-checklist.md b/doc/contribute-to-core-lightning/release-checklist.md
index 42b0ecac5afb..c1bcaef644bd 100644
--- a/doc/contribute-to-core-lightning/release-checklist.md
+++ b/doc/contribute-to-core-lightning/release-checklist.md
@@ -46,7 +46,7 @@ Here's a checklist for the release process.
 
 1. Update CHANGELOG.md by changing rc(N-1) to rcN. Update the changelog list with information from newly merged PRs also.
 2. Update the package versions: `uv run make update-versions NEW_VERSION=v<VERSION>rcN`
-3. Add a PR with the rcN.
+3. Add a PR with the rcN, and merge it.
 4. Tag it `git pull && git tag -s v<VERSION>rcN && git push origin v<VERSION>rcN`.
 5. Pushing the tag automatically starts the "Release 🚀" CI job, creating a draft pre-release and uploading reproducible builds with their `SHA256SUMS` files signed by the project key.
 6. Set up the reproducible build environment by running the script `contrib/cl-repro.sh` to generate the necessary builder images.
diff --git a/doc/contribute-to-core-lightning/security-policy.md b/doc/contribute-to-core-lightning/security-policy.md
index 6f950bc69704..d781b451fff3 100644
--- a/doc/contribute-to-core-lightning/security-policy.md
+++ b/doc/contribute-to-core-lightning/security-policy.md
@@ -13,7 +13,6 @@ We have a 3 month release cycle, and the last two versions are supported.
 ## Reporting a Vulnerability
 
 To report security vulnerabilities, please send an email to one of the following addresses:
-- `rusty@rustcorp.com.au`
 - `security@blockstream.com`
 
 Note: These email addresses are exclusively for vulnerability reporting.