S&P Global today announced completed acquisition of OpenZeppelin, security standard for onchain finance. Transaction, first announced September 17, 2026, complements S&P Global risk assessment capabilities in digital asset markets and brings OpenZeppelin deep expertise in onchain ecosystem development, enhancing ability to create next generation of onchain security assessments and benchmarks, and deliver essential intelligence as capital markets transition onchain.
Founded in 2015, OpenZeppelin combines leading onchain security assessments and secure development services with one of world leading open-source smart contract libraries, OpenZeppelin Contracts. Its security team conducted 900+ engagements for protocols and institutions defining digital asset markets, surfacing 10,000+ vulnerabilities before production, while OpenZeppelin Contracts underpin over $38 trillion in value transferred, including many of largest stablecoins and tokenized funds. Alongside security and open-source work, OpenZeppelin engineering team builds secure onchain infrastructure for leading blockchain networks and institutions.
Acquisition expands S&P Global risk assessment capabilities into onchain technology-risk layer that underpins onchain financial products, while S&P Global trusted brand, deep institutional relationships, and global distribution accelerate OpenZeppelin reach into traditional finance.
Completing acquisition important step for digital assets strategy. As more of financial system moves onchain, market participants need clear view of technology risk that sits beneath assets they hold. OpenZeppelin expertise, from blockchain and smart contract security assessments and secure development to widely used open-source library, already foundational to that infrastructure. Together, can help traditional financial institutions and DeFi-native companies alike understand and manage those risks with greater confidence.
Today OpenZeppelin begins next chapter as part of S&P Global. Team will keep doing what it does best: security assessments and secure development for world leading protocols, networks and institutions building onchain finance, while OpenZeppelin Contracts remain open source, free and publicly maintained. With S&P Global, can expand reach and impact of those standards across global markets.
OpenZeppelin will continue to operate as own business unit under OpenZeppelin name. Brener will continue to lead business, reporting to Yann Le Pallec, President, S&P Global Ratings.
Financial terms of transaction not disclosed. Transaction not expected to have material impact on financial results of S&P Global.
What is smart contract? Smart contracts software code stored on blockchain that automatically executes predefined rules when specified conditions met. In tokenized money market fund, for example, smart contract may issue new fund tokens when investor subscribes, verify compliance requirements and automatically process redemptions. While smart contracts can improve efficiency and reduce need for intermediaries, they may also be vulnerable to coding errors, bugs or malicious attacks that can result in financial losses.
How are smart contract risks managed? Firms often use pre-audited and community-reviewed smart contract libraries, such as OpenZeppelin Contracts, engage smart contract auditors to review code for vulnerabilities, and monitor contracts once they are live. Open-source code can further strengthen resilience, as it allows broader community to identify and address risks ongoing basis.
About S&P Global
S&P Global NYSE SPGI enables businesses, governments, and individuals with trusted data, expertise and technology to make decisions with conviction. Advancing Essential Intelligence through world-leading benchmarks, data, and insights customers need to plan confidently, act decisively and thrive in rapidly changing global landscape. From helping customers assess new investments across capital and commodities markets to navigating energy expansion, acceleration of AI, and evolution of public private markets.
About OpenZeppelin
OpenZeppelin security standard for onchain finance. Since 2015, company set bar for blockchain and smart contract security through industry-standard OpenZeppelin Contracts library, behind $38 trillion in value transferred, and 900+ security engagements surfaced 10,000+ vulnerabilities before production. Builds and secures onchain infrastructure for world leading blockchain networks, DeFi protocols, institutions, and enterprises globally.
