S&P Global Acquires OpenZeppelin in Major Blockchain Security Expansion

Key Highlights

• S&P Global has completed its acquisition of OpenZeppelin, a pioneering smart contract security platform established in 2015
• The security firm’s open-source code libraries have facilitated more than $37 trillion in cumulative digital asset transactions
• OpenZeppelin has conducted over 900 security reviews, uncovering more than 10,000 critical vulnerabilities
• The company will continue operating independently under CEO Demian Brener’s leadership
• This move comes after S&P’s $110 million stake in cryptocurrency data provider Kaiko

S&P Global is significantly expanding its footprint in the digital asset ecosystem through its acquisition of OpenZeppelin, a leading provider of smart contract security solutions for stablecoins, tokenized assets, and DeFi platforms. The companies did not reveal the transaction’s financial details.

Today we are announcing that S&P Global has entered an agreement to acquire OpenZeppelin.

Onchain finance is growing from an emerging market into core financial infrastructure, and the standards and rails our team and community built are becoming the rails of global finance.… pic.twitter.com/iADnpWzQ8F

— OpenZeppelin (@OpenZeppelin) September 17, 2026

Established in 2015, OpenZeppelin specializes in smart contract security auditing and maintains widely-used open-source development frameworks. The company’s technology forms the foundation for many of today’s leading stablecoins and tokenized investment products.

Through its libraries, OpenZeppelin has facilitated the transfer of more than $37 trillion in digital assets on a cumulative basis. This substantial figure represents the total value moved through smart contracts utilizing OpenZeppelin’s infrastructure, rather than assets under the company’s direct management.

Beyond its development tools, OpenZeppelin has performed more than 900 comprehensive security assessments, discovering over 10,000 potential vulnerabilities before smart contracts were deployed to production environments. This extensive security expertise represents a critical component of S&P’s strategic acquisition.

Strategic Rationale Behind the Deal

While S&P’s traditional ratings services evaluate corporate creditworthiness and financial stability, the migration of financial operations to blockchain infrastructure has introduced an additional risk dimension: smart contract vulnerabilities.

Even well-capitalized tokenized funds can experience catastrophic failures if their underlying smart contract code contains exploitable flaws. S&P anticipates growing demand from financial institutions and investment firms for uniform frameworks to evaluate technological risks in blockchain-based systems.

“As digital assets and tokenized markets continue to mature, OpenZeppelin’s technology and expertise will complement our smart contract and onchain technology risk assessment capabilities,” said S&P Global Ratings President Yann Le Pallec.

This transaction represents S&P’s evolution from assessing traditional financial institutions to evaluating the blockchain infrastructure supporting next-generation finance.

Continuation of S&P’s Crypto Strategy

The OpenZeppelin acquisition represents the latest in a series of cryptocurrency-focused initiatives from S&P. Just days earlier, the firm led an investment round that brought Kaiko’s Series B funding to $110 million total, with participation from BNP Paribas, Nasdaq Ventures, Coinbase Ventures, and Royal Bank of Canada.

In September, S&P Dow Jones Indices partnered with Kaiko to introduce a joint digital asset index family. The partnership expanded in March with the tokenization of the iBoxx U.S. Treasuries Index.

S&P has previously released stability evaluations for major stablecoins and made headlines by publishing the inaugural credit assessment of a decentralized finance protocol, Sky.

Under the acquisition terms, OpenZeppelin CEO Demian Brener will continue heading the operation as an independent division retaining the OpenZeppelin brand. Brener will maintain a direct reporting relationship with Le Pallec.

According to S&P, the acquisition remains subject to customary regulatory approvals and closing requirements, with no anticipated material effect on the company’s consolidated financial performance.

With this strategic move, S&P Global establishes itself as a pioneering traditional financial ratings organization developing comprehensive on-chain code risk evaluation capabilities at institutional scale.