S&P Global announced on September 17, 2026 that it has entered into an agreement to acquire OpenZeppelin, a smart-contract security and blockchain infrastructure company, expanding its capabilities in digital assets and blockchain-based financial markets.
The transaction adds OpenZeppelin’s smart-contract security technology to S&P Global’s existing risk assessment capabilities, positioning the acquired business as an extension of S&P Global Ratings rather than a standalone crypto division, according to S&P Global’s announcement.
OpenZeppelin confirmed the agreement through its official X account, framing onchain finance as moving from an emerging market into core financial infrastructure:
Financial terms were not disclosed, and S&P Global said it doesn’t expect the acquisition to materially impact its financial results. Jefferies is advising S&P Global with Clifford Chance as legal counsel, while FT Partners is advising OpenZeppelin with Cooley as its legal counsel.
What OpenZeppelin Built
Founded in 2015, OpenZeppelin combines onchain security assessments with what S&P Global calls one of the world’s leading open-source smart contract libraries, an infrastructure layer explained further in a guide to smart contract wallets and how they work.
| OpenZeppelin Security Ecosystem | Role |
| Smart-contract libraries | Security-focused code components for blockchain developers |
| OpenZeppelin Defender | Tools for managing and monitoring smart contracts |
| Security audits | Reviews of blockchain applications and code |
| Developer standards | Security practices for Web3 development |
Table 1. OpenZeppelin’s blockchain security infrastructure.
OpenZeppelin’s Contracts library underpins more than $37 trillion in value transferred, including the largest stablecoins and tokenized funds, and the company has conducted more than 900 security engagements surfacing over 10,000 vulnerabilities before production.
That $37 trillion figure represents cumulative value moved through contracts using OpenZeppelin’s technology, not assets the company owns, and is unrelated to the acquisition price.
How OpenZeppelin’s Business Changes Under S&P Global
OpenZeppelin will operate under its own name as a separate business unit, with co-founder and CEO Demian Brener remaining in charge and reporting to Yann Le Pallec, President of S&P Global Ratings. According to OpenZeppelin’s own announcement, its audits, engineering, and ecosystem programs will continue unchanged, delivered by the same team, with its open-source Contracts libraries staying free and publicly maintained on GitHub.
Le Pallec said S&P Global’s digital assets strategy centers on bringing trusted data, benchmarks, and transparent risk assessment to markets moving onchain, framing OpenZeppelin’s technology as complementary to S&P Global’s existing risk assessment work.
Why Smart-Contract Security Is Becoming Financial Infrastructure
As financial institutions explore tokenization and blockchain-based settlement systems, security has become a critical requirement rather than a niche concern. Traditional markets rely on established operational controls, but blockchain systems introduce additional considerations since smart contracts can directly manage asset movements, a distinction covered in more depth in a roundup of the best Layer-1 smart contract platforms.
A vulnerability in a smart contract can affect every transaction and asset the code controls, making security testing a core part of blockchain infrastructure rather than an optional add-on. Security tools cannot remove every risk, since tokenized markets still face separate challenges around governance, regulation, and adoption.
Part of a Broader S&P Global Push Into Digital Assets
The acquisition follows a series of digital-asset moves by S&P Global this year. On September 14, 2026, just three days earlier, S&P Global Ventures made a strategic investment in Kaiko, a digital-asset market data provider, as part of Kaiko’s Series B extension.
S&P Global Ratings has also extended its assessment work into digital assets more broadly, downgrading the stability rating on Tether’s USDT to “weak,” its lowest grade, in November 2025. Together, these moves suggest S&P Global is building a broader risk-assessment stack spanning market data, stablecoin ratings, and now smart-contract security.
What Comes Next for the Acquisition
The acquisition remains subject to customary closing conditions, and the companies have not disclosed the expected completion date. Future updates will likely clarify how OpenZeppelin’s technology and services will be integrated into S&P Global’s digital-asset and financial infrastructure offerings.
What this means for you: S&P Global’s acquisition of OpenZeppelin shows that blockchain security is becoming a standard part of digital-asset infrastructure rather than a specialized service on the margins. The deal does not directly change how users interact with crypto markets, but stronger smart-contract security tools backed by a major ratings company could support safer development of future blockchain-based financial products.
This article is for informational purposes only and does not constitute financial advice. Blockchain systems, digital assets, and smart contracts involve technical, operational, regulatory, and security risks.
