S&P Global (SPGI) announced on Thursday that it has reached an agreement to purchase OpenZeppelin, a smart-contract security company whose open-source code repository powers a vast portion of the stablecoin and tokenized fund ecosystem. According to S&P, applications built using the library have processed more than $37 trillion historically. Financial details of the agreement were not disclosed.
This acquisition grants S&P Global visibility into a segment of onchain finance that traditional credit ratings typically overlook: the underlying programming that issues, transfers, and governs stablecoins, tokenized funds, and decentralized finance protocols. An enterprise might maintain robust reserves or a healthy credit standing, yet still experience catastrophic failure due to a vulnerability within its smart contracts. S&P is banking on the assumption that financial institutions and asset managers will require standardized frameworks to evaluate this technical exposure before deploying capital into onchain products on a large scale.
The $37 trillion figure represents the aggregate value moved across contracts utilizing OpenZeppelin’s software repository over time, rather than funds managed or held directly by the enterprise.
“The transaction complements S&P Global’s risk assessment and ecosystem development capabilities in digital asset markets, enhancing its ability to create the next generation of onchain security assessments, benchmarks, and deliver essential intelligence as capital markets transition onchain,” the firm noted.
Established in 2015, OpenZeppelin offers onchain security evaluations and secure engineering services alongside an open-source smart contract framework utilized by many prominent stablecoins and tokenized assets. S&P stated that the company has completed over 900 security audits, identifying more than 10,000 potential vulnerabilities prior to deployment in production environments. Co-founder and CEO Demian Brener will remain at the helm of the organization as an independent division under the OpenZeppelin brand, answering to Le Pallec.
S&P has actively expanded its digital asset portfolio over the past year, releasing stablecoin stability evaluations and granting the inaugural credit rating for a DeFi protocol, Sky. OpenZeppelin broadens this scope by shifting the evaluation focus from corporate entities to the programmatic code supporting them.
This purchase follows a series of digital asset initiatives by the roughly $120 billion valuation corporation. On Monday, it spearheaded a strategic financing round that elevated cryptocurrency data provider Kaiko’s Series B funding to $110 million, with participation from BNP Paribas, Nasdaq Ventures, Coinbase Ventures, and the Royal Bank of Canada. Earlier in September, S&P Dow Jones Indices partnered with Kaiko to unveil a joint digital asset index family, following their March collaboration where the two entities tokenized the iBoxx U.S. Treasuries Index.
The acquisition remains contingent upon customary closing conditions and is not anticipated to produce a significant effect on S&P Global’s financial performance.
Originally published at https://www.coindesk.com/business/2026/09/17/ratings-giant-s-and-p-global-acquires-openzeppelin-in-tokenized-finance-risk-push.
