S&P Global agreed to acquire blockchain security firm OpenZeppelin, the financial data and ratings provider said in a Sept. 17, 2026 announcement, adding smart contract and onchain technology risk assessment to its digital asset business. Financial terms were not disclosed, and the transaction is subject to closing conditions. According to Ambcrypto, S&P Global is positioning itself to meet demand from traditional finance clients as tokenization deepens.
OpenZeppelin will keep its name and run as a separate business unit inside S&P Global. Co-founder and CEO Demian Brener stays in charge and will report to Yann Le Pallec, president of S&P Global Ratings. Crypto.news reported that S&P Global said the transaction is not expected to have a material effect on its financial results. As the source notes, S&P Global has been building risk products for digital assets since 2023, when it began credit and risk ratings covering stablecoins and DeFi protocols.
Also read: MiCA’s next frontier: Why DeFi lending vaults are a regulatory puzzle for Brussels
Key facts
- S&P Global announced the planned OpenZeppelin acquisition on Sept. 17, 2026; financial terms were not disclosed and the deal still faces closing conditions.
- Founded in 2015, OpenZeppelin has completed more than 900 security engagements and said its work identified over 10,000 vulnerabilities before projects reached production.
- Crypto.news reported that OpenZeppelin’s Contracts library has supported infrastructure handling more than $37 trillion in transferred value, including systems behind major stablecoins and tokenized funds.
- The deal came three days after S&P Global led a $110 million strategic investment in crypto market data provider Kaiko on Sept. 14.
- OpenZeppelin said every released version of its Contracts library will remain open source permanently.
What S&P Global is buying
OpenZeppelin develops open source smart contract software and provides security assessments and development services for blockchain protocols and financial institutions. Its work spans blockchain networks, DeFi protocols and traditional financial institutions, and one recent review of TxFlow’s bridge infrastructure found no critical or high severity issues, with a single medium severity issue resolved during the audit.
Le Pallec framed the purchase around data quality rather than technology alone, saying S&P Global’s digital assets strategy centers on bringing trusted data, benchmarks and transparent risk assessment to markets as they move onchain, and that OpenZeppelin’s technology and expertise would complement its smart contract and onchain risk assessment capabilities. Brener said OpenZeppelin’s technology already supports infrastructure behind stablecoins, tokenized funds and DeFi protocols, and that joining S&P Global would bring that work to more organizations entering digital asset markets.
Also read: Trading Stocks Against BONER: Inside DeFi's Strangest New Market on Robinhood Chain
An open source commitment and a wider crypto spending spree
OpenZeppelin said its open source products will remain available after the deal, including the Contracts libraries used by blockchain developers, with future versions released under the same model. Existing audits, engineering work and ecosystem programs are expected to continue with the same team, and the company said the combination gives its business access to S&P Global’s research, market data and institutional network.
The acquisition follows S&P Global’s Sept. 14 strategic investment in Paris-based Kaiko, which extended Kaiko’s Series B round to $110 million. BNP Paribas, Coinbase Ventures, Nasdaq Ventures, Royal Bank of Canada and Stellar were among the participants. Kaiko, which supplies data covering more than 150 exchanges and protocols, plans to use the capital to develop its market data business and infrastructure for onchain capital markets. The two companies had already launched the S&P Kaiko Digital Asset Indices earlier in September, and in April, S&P Dow Jones Indices and Kaiko announced plans to tokenize the iBoxx U.S. Treasuries index on Canton Network.
S&P Global’s existing digital asset work includes Stablecoin Stability Assessments, which weigh reserve assets, governance, liquidity and regulatory factors on a scale from 1, or strong, to 5, or weak. Through a partnership with Chainlink announced in October 2025, those assessments were made available onchain, initially through Coinbase’s Base network. In August, S&P Global Ratings assigned an AAAm principal stability fund rating to BlackRock’s new tokenized money market fund, which held $50 million and maintained a $1 net asset value shortly after launch.
Jefferies is serving as S&P Global’s financial adviser and Clifford Chance as its legal adviser, while FT Partners advised OpenZeppelin and Cooley acted as its legal adviser.
Why it matters
The deal hands a ratings incumbent direct control of the security expertise that underpins large parts of onchain finance, at a time when institutions are moving more products onto blockchain rails. Security losses have kept pressure on that shift: Crypto.news previously reported that crypto security losses reached $1.1 billion across 212 verified incidents in the first half of 2026, with 74% of stolen funds tied to operational security failures rather than exploited contract code. A July institutional security report cited in that coverage found compromised keys, signers and infrastructure accounted for 88.3% of roughly $764 million stolen in the second quarter, and only 4% of tracked projects combined audits, active bug bounty programs and third-party monitoring.
Skepticism about ratings agencies travels with the deal. As Ambcrypto noted, S&P Global, Moody’s and Fitch all failed to stop the 2008 global financial crisis, and their issuer-pays model means the entities being rated fund the ratings. OpenZeppelin has raised its own alarms: co-founder Manuel Aráoz said in May that advances in coding agents had shifted the balance between attackers and developers, and that he had advised friends and family to exit DeFi positions, including exposure to established lending protocols.
What to watch
Closing conditions will determine when the acquisition completes, and S&P Global has said the deal should not materially affect its results. The next test of how far the combined risk-assessment push reaches into DeFi will be how existing ratings hold up, including the USDT rating S&P Global cut to weak last November and the B- issuer credit rating it issued for Sky Protocol in 2025. This article is informational only and is not financial advice; crypto markets are volatile and uncertain, and readers should do their own research.
Reported by ambcrypto.com.
Sources: AMBCrypto, Crypto.news
