S&P Global to Acquire Smart Contract Firm OpenZeppelin
S&P Global has agreed to acquire OpenZeppelin, bringing smart contract security expertise into its expanding digital asset risk and assessment business.
S&P Global is moving deeper into blockchain infrastructure with an agreement to acquire OpenZeppelin, one of the most established security firms in the smart contract ecosystem.
The financial data and ratings company announced the transaction on September 17, saying the acquisition will strengthen its ability to assess technology risks as more financial products and capital markets infrastructure move onchain.
Financial terms were not disclosed, and the transaction remains subject to customary closing conditions.
S&P Global Expands Into Onchain Technology Risk
Founded in 2015, OpenZeppelin provides smart contract security assessments, secure development services and widely used open-source software for blockchain developers.
Its OpenZeppelin Contracts library has become foundational infrastructure across decentralized finance (DeFi), stablecoins and tokenized assets. According to S&P Global, contracts built using the technology have underpinned more than $37 trillion in value transferred.
The company has also completed more than 900 security engagements involving protocols and institutions operating in digital asset markets.
For S&P Global, the acquisition extends its existing financial risk expertise into what it describes as the onchain technology-risk layer โ including the smart contracts and underlying infrastructure supporting digital financial products.
โAs digital assets and tokenized markets continue to mature, OpenZeppelin’s technology and expertise will complement our smart contract and onchain technology risk assessment capabilities, giving traditional financial institutions and DeFi-native companies alike the confidence to build and transact in this new environment.โ
โ Yann Le Pallec, President of S&P Global Ratings
S&P Global said its broader digital asset strategy is focused on bringing established approaches to data, benchmarks and transparent risk assessment into markets adopting blockchain infrastructure.
OpenZeppelin Gains Access to Institutional Markets
The combination also gives OpenZeppelin access to S&P Global’s institutional relationships and global distribution network.
While OpenZeppelin has historically been closely associated with blockchain-native development, its technology is increasingly relevant to financial institutions experimenting with or deploying stablecoins, tokenized funds and other onchain financial products.
OpenZeppelin CEO Demian Brener said the company’s infrastructure already supports several major areas of onchain finance.
โOpenZeppelin’s standards, technology, and expertise already power the infrastructure behind the world’s leading stablecoins, tokenized funds, DeFi protocols, and onchain markets.โ
โ Demian Brener, CEO of OpenZeppelin
Brener added that joining S&P Global could extend that foundation to a broader range of organizations entering digital asset markets, as well as blockchain networks and DeFi protocols attracting institutional adoption.
Following completion of the transaction, OpenZeppelin will continue operating under its existing name as a separate business unit. Brener will remain in charge of the business and report to Le Pallec.
S&P Global said the acquisition is not expected to have a material impact on its financial results.
Why the Acquisition Matters for Onchain Finance
The agreement illustrates how smart contract security is increasingly being treated as part of the broader risk infrastructure surrounding institutional digital assets.
Traditional finance has long relied on established frameworks for evaluating credit, market and operational risks. Tokenized financial products introduce another layer: the software governing ownership, transfers, settlement and other transaction logic can itself become a source of risk.
Combining OpenZeppelin’s blockchain security capabilities with S&P Global’s established risk assessment and benchmarking businesses could support more standardized approaches to evaluating those risks as financial institutions expand their use of onchain infrastructure.
The acquisition also reflects a broader convergence between blockchain-native infrastructure and traditional financial services. Rather than treating smart contract security as a specialized concern limited to DeFi, the transaction places it alongside the data, benchmarking and risk functions already used throughout institutional markets.
As tokenized assets and onchain financial infrastructure expand, assessing the security of the code underneath them may increasingly become as important as evaluating the financial instruments themselves.

