S&P Global has agreed to acquire OpenZeppelin, the smart contract security firm whose open-source libraries and audits have underpinned an estimated $37 trillion in onchain value transfers since 2015, according to a joint announcement from OpenZeppelin on Thursday. Financial terms were not disclosed, and the deal remains subject to customary closing conditions.
OpenZeppelin has completed more than 900 security engagements and says it has flagged over 10,000 vulnerabilities in smart contracts before they reached production, work that has made its contract libraries close to a default standard for developers building on Ethereum and other EVM-compatible chains. S&P Global Ratings President Yann Le Pallec said OpenZeppelin's technology "will complement our smart contract and onchain technology risk assessment capabilities," as the ratings and data giant builds out tools to assess risk in tokenized funds, stablecoins and other onchain instruments moving onto institutional balance sheets. OpenZeppelin chief executive Demian Brener framed the deal as continuity rather than a pivot, noting that "those same rails used in DeFi carry tokenized funds, stablecoins, and institutional balance sheets" today.
OpenZeppelin said its Contracts libraries will remain open source, free and publicly maintained on GitHub, and that its existing audit work, engineering team and customer relationships will continue unchanged under S&P Global's ownership.
The acquisition extends a run of traditional finance infrastructure providers buying into crypto-native security and data firms as institutions move further onchain. S&P Global also led a strategic investment extending crypto data provider Kaiko's Series B to $110 million earlier this month. Where that deal bought S&P Global a minority stake in market data infrastructure, the OpenZeppelin acquisition gives it outright ownership of one of the standards bodies institutions already rely on to vet the smart contracts underlying tokenized products, positioning the company to sell risk assessment across both the data and code layers of onchain markets.
