S&P Global agreed to acquire smart contract security firm OpenZeppelin, expanding its digital asset business into the technology underpinning tokenized finance.
On Sept. 17, the financial data and ratings company said that OpenZeppelin will continue operating under its own name as a separate business unit. Chief Executive Demian Brener will remain in charge and report to S&P Global Ratings President Yann Le Pallec.
Financial terms were not disclosed, and the transaction remains subject to closing conditions.
The deal gives S&P direct exposure to the security layer behind stablecoins, tokenized funds, and decentralized-finance applications. OpenZeppelin’s open-source contracts have supported more than $37 trillion in transferred value, while the company has completed more than 900 security engagements and identified over 10,000 vulnerabilities before production.
The acquisition follows a broader push by S&P into digital assets as round-the-clock markets create demand for the data, benchmarks and risk infrastructure needed to support institutional capital on blockchain networks.
S&P adds smart-contract risk to its institutional toolkit
As more financial products move onto blockchains, institutions face an additional layer of risk around the software that issues, transfers and manages those assets.
S&P said OpenZeppelin will expand its capabilities in what it described as the “on-chain technology-risk layer,” including security assessments and benchmarks for digital assets.
That adds another dimension to S&P’s existing financial-risk business. Tokenized funds and stablecoins remain exposed to risks around issuers, collateral and liquidity, while their operation can also depend on smart contracts, permissions and blockchain infrastructure that introduce technical vulnerabilities.
Le Pallec said:
“Our digital assets strategy centers on bringing trusted data, benchmarks and transparent risk assessment to markets as they move onchain.”
OpenZeppelin has built its business around that technical layer. Its Contracts library is widely used across blockchain applications, while its security teams review smart contracts and other systems before deployment.
The company said its libraries will remain free, open source, and publicly maintained after the acquisition, including future versions. Its audit, engineering and security work will also continue under the existing team.
That preserves the developer model behind OpenZeppelin’s adoption while giving the company access to S&P’s institutional relationships, research resources and distribution.
Brener said the combination could help OpenZeppelin reach more financial institutions as banks, asset managers and issuers increase their use of blockchain infrastructure.
S&P said the acquisition is not expected to materially affect its financial results, emphasizing near-term expansion of capabilities rather than adding a large new revenue stream.
S&P builds infrastructure for markets that never close
The OpenZeppelin deal follows a series of investments and product launches aimed at markets that increasingly operate around the clock.
Three days earlier, S&P Global led a strategic investment in crypto-data provider Kaiko, extending the company’s Series B funding to $110 million. DRW, Susquehanna, Royal Bank of Canada, Nasdaq, BNP Paribas and other financial firms also participated as 24/7 blockchain markets increase demand for continuous pricing, valuation and risk data.
Kaiko already provides market data and infrastructure to more than 250 financial firms, institutions and regulators. Its systems connect to more than 150 exchanges and support trading, valuation and risk management across markets that do not close at the end of the traditional business day.
S&P and Kaiko have also been extending traditional financial benchmarks onto those rails.
In March, the companies brought the iBoxx US Treasuries Index on-chain, embedding index data, licensing and permissioning into blockchain infrastructure. Earlier this month, they combined their digital-asset benchmark businesses into the S&P Kaiko Digital Asset Indices, a suite designed specifically for 24/7 markets.
The expansion began before the Kaiko investment.
S&P Dow Jones Indices helped develop the S&P Digital Markets 50 Index, which combines 35 US-listed companies tied to the crypto ecosystem with 15 cryptocurrencies. Dinari subsequently worked with Chainlink to make a tokenized version of the benchmark verifiable on-chain, with Chainlink supplying real-time pricing and performance data.
That effort put S&P’s benchmark business directly into an emerging market structure where indices, assets and the data used to value them can all operate on blockchain rails.
S&P has also developed stablecoin stability assessments, issued a credit rating for DeFi protocol Sky, and licensed the S&P 500 for tokenized products, extending its traditional businesses into digital markets.
The OpenZeppelin acquisition adds another piece to that buildout.
Kaiko supplies crypto-native pricing and market data, S&P provides benchmarks and financial-risk analysis, and OpenZeppelin brings smart-contract expertise for moving assets between investors and financial applications.
The combination could become more commercially significant as trading expands outside traditional exchange hours. Always-on markets require prices, collateral valuations, benchmarks, and risk controls to keep operating overnight and through weekends, while tokenized assets add software and smart contract risks alongside conventional financial ones.
For S&P, that creates an opportunity to extend services it already sells to banks and asset managers into a market where the infrastructure itself is becoming part of the risk assessment.
If more securities and funds migrate onto blockchains, institutions may increasingly need the same provider to understand both the asset they hold and the technology that determines how it moves.