S&P Global to Acquire OpenZeppelin, Expanding Digital-Asset Infrastructure for 24/7 Markets

S&P Global has agreed to acquire OpenZeppelin, the smart contract security firm, extending the ratings and financial data company's digital asset business into the technology that underpins tokenized finance.

In a Sept. 17 announcement, the company said OpenZeppelin will continue to operate under its own name as a separate business unit. Chief Executive Demian Brener will remain in charge and report to Yann Le Pallec, President of S&P Global Ratings. Financial terms were not disclosed, and the transaction remains subject to closing conditions, meaning it has been agreed but has not yet completed.

The deal gives S&P direct exposure to the security layer behind stablecoins, tokenized funds and decentralized-finance applications. Those products run on smart contracts — self-executing programs that issue, transfer and manage digital assets on a blockchain according to coded rules — which makes the integrity of that code a foundational requirement. OpenZeppelin's open-source contracts, whose code developers can freely inspect and reuse, have supported more than $37 trillion in transferred value, and the company has completed more than 900 security engagements, identifying over 10,000 vulnerabilities before production.

The acquisition follows a broader push by S&P into digital assets, as round-the-clock markets generate demand for the data, benchmarks and risk infrastructure required to support institutional capital on blockchain networks.

Smart-contract risk joins the institutional toolkit

As more financial products move onto blockchains, institutions face an added layer of risk tied to the software that issues, transfers and manages those assets. Because smart contracts often hold or control user funds directly, a defect in their code can be exploited without the manual checks a conventional intermediary would apply, which is why security reviews have become a common step before deployment. S&P said OpenZeppelin will expand its capabilities in what it described as the "on-chain technology-risk layer," including security assessments and benchmarks for digital assets — a new dimension alongside its existing financial-risk business.

Tokenized funds and stablecoins remain exposed to risks around issuers, collateral and liquidity, but their operation can also depend on smart contracts, permissions and blockchain infrastructure that introduce technical vulnerabilities.

Le Pallec said: "Our digital assets strategy centers on bringing trusted data, benchmarks and transparent risk assessment to markets as they move onchain."

OpenZeppelin has built its business around that technical layer. Its Contracts library is widely used across blockchain applications, and its security teams review smart contracts and other systems before deployment.

The company said its libraries will remain free, open source and publicly maintained after the acquisition, including future versions, while its audit, engineering and security work continues under the existing team. That preserves the developer model behind OpenZeppelin's adoption while giving it access to S&P's institutional relationships, research resources and distribution.

Brener said the combination could help OpenZeppelin reach more financial institutions as banks, asset managers and issuers increase their use of blockchain infrastructure.

S&P added that the acquisition is not expected to materially affect its financial results, framing the move as a near-term expansion of capabilities rather than a large new revenue stream.

Building infrastructure for markets that never close

The OpenZeppelin deal follows a series of investments and product launches aimed at markets that increasingly operate around the clock.

Three days earlier, S&P Global led a strategic investment in crypto-data provider Kaiko, extending the company's Series B funding to $110 million. DRW, Susquehanna, Royal Bank of Canada, Nasdaq and BNP Paribas were among the other financial firms that participated, as 24/7 blockchain markets increase demand for continuous pricing, valuation and risk data.

Kaiko already supplies market data and infrastructure to more than 250 financial firms, institutions and regulators. Its systems connect to more than 150 exchanges and support trading, valuation and risk management across markets that do not close at the end of the traditional business day.

S&P and Kaiko have also been extending traditional financial benchmarks onto those rails. In March, the companies brought the iBoxx US Treasuries Index on-chain, embedding index data, licensing and permissioning into blockchain infrastructure. Earlier this month, they merged their digital-asset benchmark businesses into the S&P Kaiko Digital Asset Indices, a suite designed specifically for 24/7 markets.

The expansion began before the Kaiko investment. S&P Dow Jones Indices helped develop the S&P Digital Markets 50 Index, which combines 35 US-listed companies tied to the crypto ecosystem with 15 cryptocurrencies. Dinari subsequently worked with Chainlink to make a tokenized version of the benchmark verifiable on-chain, with Chainlink supplying real-time pricing and performance data.

That effort placed S&P's benchmark business directly into an emerging market structure in which indices, assets and the data used to value them can all operate on blockchain rails. S&P has also developed stablecoin stability assessments, issued a credit rating for DeFi protocol Sky, and licensed the S&P 500 for tokenized products.

A connected stack for on-chain finance

The OpenZeppelin acquisition adds another piece to that buildout. Kaiko supplies crypto-native pricing and market data, S&P benchmarks and financial-risk analysis, and OpenZeppelin contributes the smart-contract expertise needed to move assets between investors and financial applications.

The combination could grow more commercially significant as trading expands outside traditional exchange hours. Always-on markets require prices, collateral valuations, benchmarks and risk controls to keep operating overnight and through weekends, while tokenized assets add software and smart contract risks on top of conventional financial ones.

For S&P, that creates an opportunity to extend services it already sells to banks and asset managers into a market where the infrastructure itself is becoming part of the risk assessment. If more securities and funds migrate onto blockchains, institutions may increasingly need a single provider that understands both the asset they hold and the technology that determines how it moves.