Key Takeaways
- • S&P Global has agreed to acquire OpenZeppelin, a smart contract security firm founded in 2015, with financial terms undisclosed; the deal expands S&P's presence in digital assets following its $110 million investment in crypto data firm Kaiko earlier this year.
- • OpenZeppelin's open-source libraries have supported over $37 trillion in cumulative digital asset transfers and completed more than 900 security audits, identifying over 10,000 vulnerabilities before deployment to live networks.
- • OpenZeppelin will operate as a standalone unit post-acquisition, with CEO Demian Brener remaining in place, preserving the firm's organizational independence within the S&P Global structure.
- • The acquisition positions S&P Global to strengthen its foothold in onchain finance infrastructure as digital assets and decentralized protocols increasingly integrate into core financial systems globally.
Summary
S&P Global has agreed to acquire OpenZeppelin, a leading smart contract security firm, as the ratings agency deepens its strategic commitment to digital assets and blockchain infrastructure. The deal, announced on September 17, 2026, marks S&P's second major move into cryptocurrency and onchain finance this year, following a $110 million investment in Kaiko, a crypto data analytics platform. Financial terms of the OpenZeppelin acquisition were not disclosed.
OpenZeppelin, established in 2015, has become a foundational security provider for the cryptocurrency and decentralized finance ecosystem. The firm offers smart contract security audits and maintains widely-adopted open-source development libraries that underpin critical infrastructure including stablecoins, tokenized funds, and decentralized finance protocols. The scale of OpenZeppelin's impact is substantial: its libraries have processed over $37 trillion in cumulative digital asset transfers since inception. This figure represents the aggregate value moved through smart contracts built using OpenZeppelin's code, not assets held by the company itself.
OpenZeppelin's security track record forms the core strategic asset for S&P Global. The firm has completed more than 900 security engagements, identifying over 10,000 vulnerabilities before code deployment to production networks. This audit history and vulnerability detection capability represent critical infrastructure for risk management in onchain finance, directly aligned with S&P Global's core business of assessing and rating financial risk.
Under the acquisition structure, OpenZeppelin will operate as a standalone unit within S&P Global, with CEO Demian Brener continuing in his role. This operational independence preserves the firm's existing market positioning and community relationships within the developer ecosystem. The company framed the acquisition as reflective of a broader transition in which onchain finance is evolving from an emerging market into core global financial infrastructure, positioning S&P Global's acquisition of smart contract security expertise as a natural extension of its ratings and risk assessment business.
OpenZeppelin, established in 2015, has become a foundational security provider for the cryptocurrency and decentralized finance ecosystem. The firm offers smart contract security audits and maintains widely-adopted open-source development libraries that underpin critical infrastructure including stablecoins, tokenized funds, and decentralized finance protocols. The scale of OpenZeppelin's impact is substantial: its libraries have processed over $37 trillion in cumulative digital asset transfers since inception. This figure represents the aggregate value moved through smart contracts built using OpenZeppelin's code, not assets held by the company itself.
OpenZeppelin's security track record forms the core strategic asset for S&P Global. The firm has completed more than 900 security engagements, identifying over 10,000 vulnerabilities before code deployment to production networks. This audit history and vulnerability detection capability represent critical infrastructure for risk management in onchain finance, directly aligned with S&P Global's core business of assessing and rating financial risk.
Under the acquisition structure, OpenZeppelin will operate as a standalone unit within S&P Global, with CEO Demian Brener continuing in his role. This operational independence preserves the firm's existing market positioning and community relationships within the developer ecosystem. The company framed the acquisition as reflective of a broader transition in which onchain finance is evolving from an emerging market into core global financial infrastructure, positioning S&P Global's acquisition of smart contract security expertise as a natural extension of its ratings and risk assessment business.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.