S&P Global's expansion into blockchain security

S&P Global has agreed to acquire OpenZeppelin, a prominent smart-contract security firm whose open-source Contracts library underpins a large share of onchain activity. Under the terms disclosed, OpenZeppelin will continue to operate as a standalone business unit under its own name, with CEO Demian Brener remaining in place and reporting to Yann Le Pallec, president of S&P Global Ratings. Financial terms were not disclosed, the transaction is subject to customary closing conditions, and S&P said it does not expect the deal to materially affect its near-term financial results.

OpenZeppelin’s Contracts library has supported more than $37 trillion in transferred value across blockchains. The company has completed more than 900 security engagements and identified over 10,000 vulnerabilities prior to production. S&P characterized the acquisition as an expansion into the “on-chain technology-risk layer,” adding smart-contract security assessments and benchmarks to its institutional toolkit. The firm says OpenZeppelin’s libraries will remain free, open source, and publicly maintained, and its audit, engineering, and security work will continue under the existing team.

The move follows S&P’s broader push into digital assets and round-the-clock markets. Three days before the OpenZeppelin announcement, S&P made a strategic investment in Kaiko on Sept. 14, expanding Kaiko’s Series B to $110 million with participation from DRW, Susquehanna, Royal Bank of Canada, Nasdaq, BNP Paribas and others. S&P has been combining market data, benchmarks and smart-contract expertise—bringing pricing, index and risk capabilities onto blockchain rails for tokenized funds, stablecoins and decentralized applications. By adding OpenZeppelin’s technical security layer to Kaiko’s data and S&P’s benchmarks and analysis, the company is assembling a toolkit aimed at institutions that need both financial risk assessments and an understanding of the software that governs tokenized assets.