S&P Global has agreed to acquire OpenZeppelin, one of the crypto industry’s most established smart contract security companies, in a deal that will expand the financial data and ratings group’s capabilities into onchain technology risk.The companies announced the agreement on September 17. Financial terms were not disclosed, and the transaction remains subject to customary closing conditions. S&P Global said the acquisition is not expected to have a material impact on its financial results. OpenZeppelin will continue operating under its existing name as a separate business unit within S&P Global. Chief Executive Demian Brener will remain in charge and will report to Yann Le Pallec, president of S&P Global Ratings.
S&P Pushes Deeper Into Onchain Risk
Founded in 2015, OpenZeppelin provides smart contract audits, security assessments and development tools, and maintains one of the most widely used open-source libraries for Ethereum and other blockchain applications. According to the companies, OpenZeppelin Contracts have underpinned more than $37 trillion in value transferred, while the firm has completed more than 900 security engagements and identified more than 10,000 vulnerabilities before production. Its software is used across major stablecoins, tokenized funds, DeFi protocols and blockchain networks.S&P Global said OpenZeppelin will complement its existing work in smart contract and onchain technology risk assessment. The company expects the combination to support new security assessments, benchmarks and risk tools aimed at both traditional financial institutions and crypto-native businesses. Le Pallec said S&P’s digital asset strategy is focused on bringing trusted data, benchmarks and transparent risk assessment to markets as financial activity moves onchain. OpenZeppelin, meanwhile, said its open-source libraries and developer tools will remain freely available and publicly maintained following the acquisition. That commitment is significant because OpenZeppelin’s code is embedded across a broad section of the Ethereum ecosystem. The company said existing and future versions of its open-source applications will remain open source, while its audits and other security engagements will continue under the same team.
Deal Extends S&P’s Broader Digital Asset Expansion
The acquisition comes only days after S&P Global led a $110 million funding round in crypto market-data provider Kaiko, alongside investors including Nasdaq, BNP Paribas, Royal Bank of Canada, Bpifrance and Susquehanna. Earlier in September, S&P Dow Jones Indices and Kaiko also launched digital asset indices, reinforcing S&P Global’s effort to build infrastructure around institutional crypto markets. The OpenZeppelin transaction adds a different layer to that strategy. Kaiko strengthens S&P’s access to market and pricing data, while OpenZeppelin gives it expertise in the underlying software risks of tokenized assets, smart contracts and blockchain protocols.That combination could become increasingly relevant as banks, asset managers and exchanges experiment with tokenized money-market funds, securities and other real-world assets. Traditional credit and market-risk analysis may not capture technical vulnerabilities such as faulty smart contracts, compromised access controls or blockchain-specific operational risks. S&P Global said OpenZeppelin’s capabilities will therefore extend its risk assessment business into the technological infrastructure underpinning onchain financial products. For OpenZeppelin, the acquisition provides access to S&P Global’s institutional client network, research resources and global distribution while retaining the company’s existing brand and development model. The deal is therefore less about S&P acquiring a conventional crypto business than about integrating blockchain security into the broader financial risk infrastructure used by institutional markets. As tokenized assets move from experimental products toward mainstream financial infrastructure, S&P is positioning smart contract risk alongside data, benchmarks and credit analysis as another category institutions may need to evaluate systematically.