S&P Global has agreed to buy OpenZeppelin, a move that pairs one of the best-known names in credit ratings and market data with a firm that has spent a decade building security standards for blockchain-based finance.
The companies announced the deal on September 17, 2026.
Terms were not disclosed, and the transaction still needs to satisfy customary closing conditions.OpenZeppelin, founded in 2015, has become closely associated with the code that underpins large parts of onchain activity.
Its open-source smart contract library has been used in systems that have transferred more than $37 trillion in value.
That includes a large share of the biggest stablecoins and tokenized funds.
Alongside the library, the company has completed more than 900 security reviews for protocols and institutions and says it has identified over 10,000 vulnerabilities before code went live.
The acquisition is meant to extend S&P Global’s digital-asset work beyond issuer credit quality and reserve analysis into the technology layer itself.
As banks, asset managers, and other traditional firms put more activity onchain, they face risks that live in the smart contracts that issue, move, and administer tokens.
S&P Global Ratings President Yann Le Pallec framed the purchase as part of a strategy to bring trusted data, benchmarks, and clearer risk assessment to markets as they migrate onto blockchains.
OpenZeppelin’s tools and experience, he said, will complement existing work on smart-contract and onchain technology risk, giving both established institutions and crypto-native firms more confidence to build and transact.For OpenZeppelin, the deal is a path into a wider institutional audience.
Chief Executive Demian Brener said the company began with a goal of a secure, global financial system running on blockchain contracts.
Those same building blocks now support tokenized funds, stablecoins, and institutional balance sheets.
Joining S&P Global, he argued, lets the standards the team and community developed become part of the infrastructure for the next phase of global finance.
Operationally, little is expected to change on the surface.
OpenZeppelin will keep its name and run as a distinct business unit. Brener will stay in charge and report to Le Pallec.
The company has also said its open-source contracts and related tools will remain free, publicly available, and maintained on GitHub.
Audits, engineering work, and ecosystem programs are slated to continue with the same team and quality bar, now with access to S&P Global’s research capacity, market data, and distribution.
The purchase follows other recent S&P Global steps in digital assets, including a strategic investment in crypto market-data firm Kaiko.
Together, the moves suggest an effort to cover both the data that describes onchain markets and the code that actually runs them.
Tokenized products and 24/7 settlement still need to scale before that coverage turns into a large standalone business, and S&P has indicated the deal is not expected to have a material near-term effect on its financial results.
Even so, the logic is straightforward.
Credit ratings have long assessed balance sheets and cash flows. Onchain markets add a second question: whether the software that moves the money is sound. By bringing OpenZeppelin inside the group, S&P Global is trying to answer both.