S&P Global Agrees to Acquire Smart Contract Security Firm OpenZeppelin
Global ratings firm to buy blockchain security provider
S&P Global has agreed to acquire OpenZeppelin, a company that provides security checks for smart contracts. Smart contracts are self-executing code that runs on a blockchain, which is a distributed digital ledger. This move allows S&P, a major financial data and ratings company, to expand its risk assessment services into onchain technology. The deal brings a provider of code audits and open-source developer tools into S&P’s digital asset risk business.
Key details of the agreement
- OpenZeppelin will keep its name and operate as a separate business unit under S&P Global.
- Demian Brener, the CEO of OpenZeppelin, will continue to lead the company and report to Yann Le Pallec, president of S&P Global Ratings.
- The financial terms of the deal were not disclosed.
- The transaction is still subject to closing conditions.
- OpenZeppelin states that its audit team and brand will remain unchanged.
What S&P Global said about the deal
S&P Global announced that the acquisition will extend its risk-assessment capabilities into onchain technology. This supports new security assessments and benchmarks for digital assets. Yann Le Pallec stated that the company’s digital assets strategy focuses on providing trusted data and transparent risk assessment as markets move onchain. The company noted that OpenZeppelin has conducted more than 900 security engagements. According to figures cited by S&P, the open-source Contracts libraries created by OpenZeppelin support more than $37 trillion in value transferred across various blockchains.
Context on OpenZeppelin's services
Founded in 2015, OpenZeppelin offers security assessments and secure development services. It provides open-source libraries that developers use to build smart contracts without writing code from scratch. Its audit service reviews blockchain code for errors, with clients including Uniswap, Aave, Coinbase, and the Ethereum Foundation. The company reports that its security engagements have found over 10,000 vulnerabilities before production. OpenZeppelin also runs the Defender platform, which bundles tools for coding, auditing, and monitoring blockchain applications. However, the company disabled new sign-ups for Defender on June 30, 2025, and scheduled its final shutdown for July 1, 2026. Users are directed to migration guides for moving to open-source versions of its tools.
Why this matters for the crypto industry
S&P Global Ratings already assesses financial risks in crypto products. For example, in November 2025, it lowered the stability assessment for Tether’s USDT stablecoin due to changes in the reserve assets. By acquiring OpenZeppelin, S&P moves closer to the code layer beneath stablecoins, tokenized funds, and DeFi protocols. If the acquisition closes, DeFi teams hiring OpenZeppelin will be buying security work from a company owned by S&P Global. This integration aims to bridge traditional financial risk methods with onchain technology security.
Sources
Newisty Editorial Team covers technology, cryptocurrency, digital products, online platforms, developer tools and the wider digital economy. Our content is researched from official sources, company announcements, public documentation, market data and other primary or reputable sources. Articles are reviewed and edited before publication for clarity, accuracy and useful context.