S&P Global is expanding deeper into the digital asset market after announcing on September 17, 2026 that it had signed an agreement to acquire OpenZeppelin, a blockchain security company founded in 20S&P Global is expanding deeper into the digital asset market after announcing on September 17, 2026 that it had signed an agreement to acquire OpenZeppelin, a blockchain security company founded in 20
S&P Global Signs Agreement to Acquire OpenZeppelin: From Financial Ratings to Onchain Infrastructure Risk Assessment
S&P Global is expanding deeper into the digital asset market after announcing on September 17, 2026 that it had signed an agreement to acquire OpenZeppelin, a blockchain security company founded in 2015 and behind one of the industry’s most widely used open-source smart contract libraries. The financial terms of the transaction were not disclosed, and the deal remains subject to closing conditions.
If the transaction is completed, OpenZeppelin will continue operating under its own name as a business unit of S&P Global. CEO Demian Brener will remain in charge of the company and report to Yann Le Pallec, President of S&P Global Ratings.
The scale of OpenZeppelin’s influence is one of the main reasons the acquisition is notable. According to the two companies, OpenZeppelin Contracts have been used in infrastructure supporting more than $37 trillion in value transferred onchain, while OpenZeppelin has completed more than 900 security engagements and identified more than 10,000 vulnerabilities before production. This does not mean OpenZeppelin manages $37 trillion in assets; it refers to the total value transferred through smart contracts using the company’s standards and infrastructure.
For S&P Global, the deal shows that its digital asset strategy is expanding beyond data, benchmarks, and asset assessment into a new layer: the risk of the smart contracts and blockchain infrastructure used by onchain financial assets.
Key Takeaways
S&P Global signed an agreement to acquire OpenZeppelin on September 17, 2026; the transaction has not yet been completed.
Financial terms were not disclosed, and S&P Global said the acquisition is not expected to have a material impact on the company’s financial results.
OpenZeppelin will continue operating as a separate business unit, with CEO Demian Brener remaining in charge.
OpenZeppelin has completed more than 900 security engagements and says it has identified more than 10,000 vulnerabilities before production.
OpenZeppelin Contracts have supported infrastructure handling more than $37 trillion in value transferred, but this figure does not represent assets custodied or managed by OpenZeppelin.
S&P Global wants to combine OpenZeppelin’s blockchain security capabilities with its existing data, benchmarks, ratings, and risk assessment expertise to develop a new generation of onchain security assessments.
OpenZeppelin has committed that its Contracts libraries and open-source tools will remain free, open source, and publicly maintained on GitHub.
The deal comes as S&P Global accelerates its digital asset strategy, including an expanded partnership with and investment in Kaiko in September 2026.
What Happened? How Is S&P Global Acquiring OpenZeppelin?
On September 17, S&P Global announced that it had signed an agreement to acquire OpenZeppelin. This wording matters because the transaction is still subject to closing conditions, so OpenZeppelin should not yet be treated as a company fully owned by S&P Global at the time of the announcement.
After the transaction closes, OpenZeppelin is expected to continue operating under its existing brand. Demian Brener will remain in a leadership role, while the business unit will sit under S&P Global Ratings.
S&P Global did not disclose how much it will pay for the acquisition. The company also said the transaction is not expected to have a material impact on its financial results.
The more important issue lies in the technology assets and expertise S&P Global is gaining access to.
OpenZeppelin operates across two major layers of blockchain security:
The company develops open-source smart contract standards and libraries used by developers to build tokens, DeFi protocols, and other onchain applications.
OpenZeppelin provides security assessments, secure development, and related services for smart contracts and blockchain infrastructure to both protocols and financial institutions.
According to S&P Global, OpenZeppelin Contracts are used in the infrastructure of many major stablecoins and tokenized funds. The company has also completed more than 900 security engagements for protocols and organizations across digital asset markets.
What Does OpenZeppelin’s $37 Trillion Figure Actually Mean?
The more than $37 trillion figure can easily be misunderstood without proper context.
OpenZeppelin does not custody $37 trillion in assets, nor does it have $37 trillion in Assets Under Management.
The official information states that OpenZeppelin Contracts have underpinned more than $37 trillion in value transferred. In simple terms, OpenZeppelin’s standards and smart contract components have been used in infrastructure through which an enormous amount of onchain value has been transferred.
The significance of this figure lies in the widespread adoption of its code infrastructure, not the size of OpenZeppelin’s balance sheet.
This is also why S&P Global is not simply buying a company that performs audits. OpenZeppelin owns standards, code libraries, and security expertise embedded deeply within the infrastructure layer of onchain finance.
Background / Context: S&P Global Had Already Been Building a Digital Asset Strategy Before the Deal
The OpenZeppelin acquisition did not emerge in isolation.
S&P Global has already developed a range of products related to digital assets, including assessments of stablecoins, tokenized funds, digital securities, and new assets or infrastructure across blockchain markets. The company says institutional investors use these risk assessments when evaluating digital assets before allocating capital.
S&P Global Ratings has also participated in evaluating tokenized funds. By June 2026, the company said it was rating three tokenized funds and viewed tokenization as an evolution of digital finance, although the scale of tokenized money market funds remained small compared with the traditional money market fund industry.
In September 2026, this strategy accelerated significantly.
On September 1, S&P Dow Jones Indices and Kaiko announced the S&P Kaiko Digital Asset Indices, combining Kaiko’s crypto-native market data with S&P DJI’s benchmark administration and distribution capabilities.
On September 14, just three days before the OpenZeppelin announcement, S&P Global also announced a strategic investment in Kaiko through S&P Global Ventures. The company said the move was intended to deepen its commitment to digital assets and onchain markets.
Then, on September 17, OpenZeppelin added another piece to the strategy.
If Kaiko strengthens S&P Global’s capabilities in market data and analytics, OpenZeppelin can add expertise in smart contract and onchain technology risk.
Viewed in this broader context, the acquisition can be understood as part of a larger strategy to build information and risk assessment infrastructure for onchain financial markets rather than as a standalone crypto investment.
Why It Matters: Why Does S&P Global Want to Own OpenZeppelin?
Onchain Asset Risk Is Not Only Financial
This may be the most important implication of the acquisition.
In traditional markets, an investor may evaluate:
Credit quality of the issuer.
Liquidity.
Counterparty risk.
Market risk.
Structure of the financial product.
But when an asset is moved onto a blockchain, an additional layer of risk emerges: technology risk.
A tokenized fund may hold high-quality underlying assets, but the smart contract can still contain bugs. A bridge can fail. Access controls can be misconfigured. An upgrade mechanism can create additional risks.
S&P Global has explicitly said that OpenZeppelin will help expand its risk assessment capabilities into the onchain technology-risk layer.
This could make digital asset assessment more multidimensional.
In the future, an institutional investor may need to ask not only what backs an asset, but also how the smart contract is designed, how the protocol operates, and what risks exist across the technology stack.
Tokenization Needs a New Layer of “Trust Infrastructure”
S&P Global is monitoring tokenization as a structural change in capital markets. The company has previously said that blockchain and tokenization could improve settlement efficiency and reduce costs, while interoperability, regulatory clarity, governance, and technical security remain major challenges.
As traditional assets move onchain, the financial system cannot rely solely on code working correctly most of the time.
Large institutions often require:
Risk frameworks.
Standards.
Independent assessments.
Compliance processes.
Benchmarking.
Ongoing monitoring.
OpenZeppelin brings blockchain security expertise. S&P Global brings institutional relationships, data, ratings infrastructure, and distribution.
The combination could help create an assessment layer between traditional financial risk analysis and blockchain-native security.
This remains a strategic possibility. S&P Global has not yet disclosed the full range of final products that will result from integrating OpenZeppelin.
S&P Global Is Building a Bridge Between TradFi and DeFi
OpenZeppelin describes the transaction as a step toward bringing infrastructure built by the crypto community closer to institutional finance. The company notes that stablecoins and tokenized money market funds are increasingly using standards that were initially developed for DeFi.
This is an important point.
The boundary between “TradFi infrastructure” and “DeFi infrastructure” is becoming less distinct as the same smart contract standard can be used by a DeFi protocol, a stablecoin issuer, or a tokenized fund.
In this environment, blockchain security is no longer simply a service for crypto startups.
It could gradually become part of risk management for banks, asset managers, and capital-market infrastructure providers.
Impact: How Could the Acquisition Affect the Market?
Impact on S&P Global
For S&P Global, OpenZeppelin adds a capability that traditional financial data and credit expertise would be difficult to build quickly: blockchain-native security knowledge.
Instead of evaluating only the financial characteristics of a digital asset, S&P Global could develop additional products related to:
Smart contract risk.
Protocol security.
Onchain infrastructure.
Technology benchmarks.
Security assessments.
Institutional intelligence on blockchain systems.
S&P Global has clearly stated that the acquisition is intended to support the development of a new generation of onchain security assessments and benchmarks.
If successfully implemented, this could help the company expand its traditional role from providing ratings, data, and indices into becoming part of the risk infrastructure for onchain capital markets.
However, there is currently no official information about the methodology, pricing, or specific launch timing of these new products.
Impact on OpenZeppelin
OpenZeppelin could gain another advantage: distribution.
The company already has a strong position within the crypto-native ecosystem, but S&P Global has deep relationships with institutional investors, banks, asset managers, and other participants across capital markets.
OpenZeppelin says that after the acquisition, it will gain better access to S&P Global’s research capabilities, market data, institutional relationships, and customer network.
This could help OpenZeppelin expand beyond DeFi and blockchain protocols into TradFi clients building stablecoins, tokenized funds, or blockchain infrastructure.
The challenge, however, will be maintaining credibility with the open-source developer community while becoming part of a major traditional financial corporation.
Impact on Open Source
This is likely one of the biggest concerns for developers.
OpenZeppelin has made a specific commitment that OpenZeppelin Contracts libraries will remain open source, free, and publicly maintained on GitHub.
The company also says:
Existing releases will remain open source permanently.
Future releases will continue to be open source.
The same commitment applies to open-source applications and tools.
Existing security audits, engineering work, and ecosystem programs will continue to be operated by the same team.
This reduces one of the natural concerns that can arise when an open-source infrastructure provider is acquired by a large financial corporation.
However, the long-term impact will still need to be evaluated through governance, development priorities, and how OpenZeppelin balances institutional clients with the developer community after the transaction closes.
Impact on Tokenized Assets and Stablecoins
OpenZeppelin says that many major stablecoins and tokenized money market funds use its standards. At the same time, S&P Global is expanding its assessments and research around these same asset categories.
As a result, the acquisition creates the possibility of connecting two layers that were previously relatively separate.
One layer is financial assessment, including the quality of underlying assets, credit risk, or the ability to maintain a peg.
The other is technology assessment, including smart contract implementation and onchain infrastructure.
For institutional adoption, assessing these two layers together could become increasingly important as tokenized financial products grow in scale.
This does not mean S&P Global will automatically evaluate every tokenized asset through OpenZeppelin. Specific methodologies and independent assessment processes still need to be disclosed.
Impact on the Blockchain Security Industry
The transaction also has implications for the smart contract security industry.
The fact that an institution such as S&P Global is acquiring a blockchain security company suggests that onchain security is increasingly being viewed as part of financial infrastructure, rather than merely as a supporting technical service.
If institutional tokenization continues to grow, demand for audits, continuous monitoring, security standards, and independent technology assessments could increase alongside the amount of assets moving onchain.
However, a single acquisition is not enough to conclude that the entire blockchain security industry is entering a wave of consolidation. It will be important to watch whether other financial data providers, ratings firms, and institutional infrastructure companies make similar moves.
What Happens Next?
The first thing to monitor is whether the transaction actually closes. S&P Global and OpenZeppelin have signed an agreement, but the deal remains subject to closing conditions.
After that, several factors will be worth watching:
Onchain security assessments: How S&P Global turns OpenZeppelin’s expertise into specific risk assessment products.
Benchmark development: The company has referred to a new generation of benchmarks for onchain markets, but the methodology has not yet been fully disclosed.
Integration with digital asset ratings: It will be important to see whether smart contract risk becomes a deeper component of how S&P Global evaluates stablecoins, tokenized funds, and digital securities.
Open-source development: Whether OpenZeppelin continues to maintain its Contracts libraries for free and publicly will be an important measure of whether its commitments remain intact after the acquisition.
Institutional customers: It will be worth tracking whether OpenZeppelin attracts more banks, asset managers, and capital-market institutions through S&P Global’s distribution network.
Kaiko and OpenZeppelin: The two moves in the same month suggest S&P Global is simultaneously building capabilities in market data and security. Whether these components are integrated into a broader platform will be important to watch.
The most important question is whether S&P Global can turn blockchain-native expertise into institutional-grade risk infrastructure that financial institutions actually use when bringing assets onchain.
If that happens, the value of the transaction will not simply come from owning a smart contract security company, but from S&P Global’s ability to extend its traditional ratings and risk intelligence model into a financial market that is increasingly operating onchain.
FAQ
Has S&P Global Completed Its Acquisition of OpenZeppelin?
No. On September 17, 2026, S&P Global announced that it had signed an agreement to acquire OpenZeppelin, but the transaction remains subject to closing conditions. Financial terms were not disclosed.
What Is OpenZeppelin?
OpenZeppelin is a blockchain security company founded in 2015. It develops open-source smart contract libraries and provides security assessments, secure development, and a range of other blockchain security services.
What Does OpenZeppelin’s $37 Trillion Figure Mean?
According to OpenZeppelin, the company’s Contracts standards have supported infrastructure through which more than $37 trillion in value has been transferred onchain. This does not mean OpenZeppelin owns, manages, or custodies $37 trillion in assets.
How Many Audits Has OpenZeppelin Completed?
The official source uses the broader term more than 900 security engagements. OpenZeppelin also says its security work has identified more than 10,000 vulnerabilities before they reached production.
Will OpenZeppelin Contracts Remain Free After the Acquisition?
According to OpenZeppelin’s current commitment, yes. The Contracts libraries will remain free, open source, and publicly maintained on GitHub, while both current and future releases will continue to remain open source.
Why Does S&P Global Want to Acquire OpenZeppelin?
S&P Global wants to expand its risk assessment capabilities into onchain technology risk. OpenZeppelin adds expertise in smart contracts and blockchain security, while S&P Global already has strengths in ratings, financial data, benchmarks, and institutional distribution.
Disclaimer: The information provided here is for informational purposes only and should not be considered financial, investment, legal, or professional advice. Always conduct your own research, consider your financial situation, and, if necessary, consult with a licensed professional before making any decisions.
Market Opportunity
REAL Price(ASSET)
$0.24616
$0.24616$0.24616
USD
REAL (ASSET) Live Price Chart
The articles shared on this page are sourced from public platforms and are provided for reference only. They do not represent the position or views of MEXC. All rights belong to Nguyen Rin Hoang. If you believe any content infringes upon the rights of a third party, please contact service@support.mexc.com for prompt removal. MEXC does not guarantee the accuracy, completeness, or timeliness of any content and is not responsible for any actions taken based on the information provided. The content does not constitute financial, legal, or other professional advice, nor should it be interpreted as a recommendation or endorsement by MEXC. For expert insights and in-depth analysis, visit MEXC Learn.
Latest Updates on REAL
View More
BitGo Wins Korea VASP Registration—Why It Matters for Crypto
BitGo has secured an important foothold in one of Asia’s largest cryptocurrency markets after BitGo Korea received Virtual Asset Service Provider registration from South Korea’s Korea Financial Intelligence Unit. The BitGo Korea VASP registration allows the company’s local entity to provide virtual-asset custody and transfer services to institutional and enterprise clients under South Korea’s regulated framework
2026/08/21
USD1 Canton Network: Can Stablecoins Unlock RWA Settlement?
World Liberty Financial has expanded USD1 into institutional tokenized finance by making the stablecoin natively available on Canton Network. The USD1 Canton Network integration is designed to give institutions a fully reserved dollar-denominated settlement asset that can operate alongside tokenized real-world assets rather than requiring the cash side of a transaction to remain in a separate banking workflow.
That distinction matters. Tokenizing bonds, funds, loans or other assets solves only one side of a financial transaction. Institutions still need reliable cash for settlement, collateral movements, redemptions and financing. By bringing a dollar stablecoin directly into Canton’s privacy-focused infrastructure, USD1 could provide that cash leg while allowing financial institutions to maintain the controls and confidentiality required in regulated markets
2026/08/26
POSCO Trade Receivables Go Onchain: Why It Matters
One of the most practical real-world asset use cases is moving beyond proof-of-concept. POSCO International America has worked with trade-finance platform Olea and digital asset infrastructure provider Intain to tokenize real trade receivables and record them onchain, connecting blockchain technology directly with working-capital finance.
The POSCO trade receivables transaction is notable because the underlying assets came from actual trade workflows rather than synthetic blockchain-native assets. Before registration onchain, Intain reconciled information across invoices, purchase orders, credit notes and shipment documents. The verified receivables were then converted into tokenized digital assets, with the transaction executed on Intain’s Layer 1 network using Avalanche infrastructure
2026/08/26
You May Also Like
HOT
Currently trending cryptocurrencies that are gaining significant market attention
Crypto Prices
The cryptocurrencies with the highest trading volume
Newly Added
Recently listed cryptocurrencies that are available for trading