S&P Global has agreed to acquire OpenZeppelin, a major smart contract security company whose open-source software has supported blockchain contracts involved in more than $37 trillion in cumulative transferred value.

Under the agreement, OpenZeppelin will join S&P Global as a standalone business unit while retaining its existing name and operating structure. The deal expands S&P Global’s presence in digital assets as financial institutions, stablecoin issuers and decentralized finance platforms increasingly move financial activity onto blockchain networks. For a company whose established franchises are credit ratings, indices and market data, the transaction brings code-level blockchain security in-house. The companies announced the transaction in an official announcement.

OpenZeppelin’s Security Infrastructure

Founded in 2015, OpenZeppelin provides security assessments and secure development services to decentralized finance protocols and traditional financial institutions. Its technology portfolio includes OpenZeppelin Contracts, an open-source library containing standardized implementations for tokens and smart contracts.

The library is widely used across the digital asset industry, including by major stablecoins and tokenized investment funds. According to the announcement, the more than $37 trillion figure represents the cumulative value transferred through contracts built using the library. That scale of adoption makes the library a piece of shared industry infrastructure — much of the onchain economy runs on the same standardized building blocks, which is part of what an acquirer gains alongside the security practice itself.

OpenZeppelin has conducted more than 900 security engagements since its founding. One notable review was its late-2021 assessment of Convex Finance, which identified a vulnerability capable of putting about $15 billion in deposits at risk. The issue was subsequently addressed before the reported exposure could become an actual loss.

S&P Global said the acquisition will strengthen its ability to provide smart contract and onchain technology risk assessments. The company plans to combine OpenZeppelin’s security expertise with its existing data, benchmarks and risk analysis capabilities.

OpenZeppelin to Operate as Independent Unit

OpenZeppelin will continue operating as a separate business within S&P Global after the transaction is completed. Chief Executive Officer Demian Brener will remain in his position and report to Yann Le Pallec, president of S&P Global Ratings. That reporting line places the blockchain security business inside the company’s ratings organization.

The companies did not disclose financial terms. S&P Global said it does not expect the acquisition to have a material effect on its financial results.

The structure is intended to preserve OpenZeppelin’s established operations while giving the security firm access to a broader customer base through S&P Global. The companies said the combination could support organizations evaluating blockchain-based financial infrastructure and digital asset markets. Until the transaction is completed, OpenZeppelin continues to operate as an independent company.

Brener said OpenZeppelin’s standards, technology and security expertise already support infrastructure used by stablecoins, tokenized funds, DeFi protocols and other onchain markets. He indicated that S&P Global could extend those capabilities to more organizations entering the digital asset sector, as well as to blockchain networks and DeFi platforms attracting greater institutional participation.

Today we are announcing that S&P Global has entered an agreement to acquire OpenZeppelin. Onchain finance is growing from an emerging market into core financial infrastructure, and the standards and rails our team and community built are becoming the rails of global finance.… pic.twitter.com/iADnpWzQ8F — OpenZeppelin (@OpenZeppelin) September 17, 2026

The acquisition is expected to broaden access to OpenZeppelin’s smart contract security technology as banks, asset managers, blockchain networks and DeFi companies increase their involvement in tokenized and onchain financial markets.

Deal Comes Amid Tokenization Activity

The transaction comes as the financial industry continues to explore tokenization, in which traditional financial assets are represented and transferred through blockchain-based systems.

S&P Global has already established a presence in digital assets through its index business. S&P Dow Jones Indices began publishing cryptocurrency benchmarks in 2021, including a broad index tracking more than 240 digital assets and separate benchmarks for Bitcoin and Ethereum. Pricing information for those products was supplied by Lukka.

Adding OpenZeppelin gives S&P Global a more direct position in the technology and security infrastructure supporting blockchain applications. OpenZeppelin’s security assessments are designed to identify vulnerabilities in smart contracts, while its open-source development tools provide standardized components for blockchain developers. How those audits and tools end up packaged alongside S&P Global’s data and benchmark products is one of the questions that will take shape as the deal moves from announcement to integration.

For financial institutions moving into tokenized assets, smart contract security is an important consideration because software vulnerabilities can potentially affect large amounts of capital. OpenZeppelin’s role in auditing and securing blockchain applications could complement S&P Global’s broader focus on financial data, analytics and risk assessment.

Jefferies is advising S&P Global on the financial aspects of the transaction, with Clifford Chance serving as legal counsel. FT Partners is advising OpenZeppelin on financial and strategic matters, while Cooley is providing legal counsel.

The transaction links S&P Global’s financial-market data and risk capabilities with OpenZeppelin’s blockchain security infrastructure as tokenized assets and onchain financial markets expand.