Key Takeaways
S&P Global (NYSE: SPGI) announced on September 17, 2026 that it agreed to acquire OpenZeppelin, the smart contract security firm founded in 2015, with financial terms undisclosed.
OpenZeppelin's open-source libraries underpin more than $37 trillion in value transferred and secure the majority of the largest stablecoins and tokenized funds, backed by 900 or more security engagements.
The deal moves a traditional ratings and data giant directly into onchain security, the technical layer that decides whether tokenized markets can be trusted with real money.
S&P Global agreed on September 17 to buy OpenZeppelin, one of the most widely used names in blockchain security, in a move that pushes Wall Street infrastructure deeper into onchain finance. According to the company's announcement, the transaction is still subject to closing conditions and the price was not disclosed. OpenZeppelin will keep its name and operate as its own unit, with chief executive Demian Brener staying on to run it.
The value here is in what OpenZeppelin quietly secures. Founded in 2015, its open-source smart contract library sits behind more than $37 trillion in value transferred, including most of the biggest stablecoins and tokenized funds, and its auditors have run over 900 security engagements that surfaced more than 10,000 vulnerabilities before they reached production. S&P Global Ratings President Yann Le Pallec said the deal gives traditional institutions and DeFi-native firms alike "the confidence to build and transact in this new environment."
The pattern here is hard to ignore. The same infrastructure that WYDE covered when a patched Aptos flaw put an estimated $70 billion at risk is now being bought up by the firm that rates the bonds in your pension. As Wall Street plumbing moves onchain, seen most recently when Broadridge opened its US wealth platform to tokenized assets, the companies that write the security standards become strategic ground. That is what S&P just paid for.
People Also Ask
What did S&P Global announce?
On September 17, 2026, S&P Global said it agreed to acquire OpenZeppelin, the smart contract security firm, to expand its risk assessment capabilities into onchain finance. Terms were not disclosed.
What is OpenZeppelin?
OpenZeppelin is a blockchain security firm founded in 2015. Its open-source smart contract library underpins more than $37 trillion in value transferred and secures many of the largest stablecoins and tokenized funds.
Why is S&P Global buying a crypto security firm?
S&P Global says it wants to bring trusted data, benchmarks, and transparent risk assessment to markets as they move onchain, adding OpenZeppelin's technology to its digital asset strategy.
Will OpenZeppelin's open-source tools stay free?
OpenZeppelin will keep operating under its own name, and its widely used contract library remains open source and publicly maintained on GitHub, with CEO Demian Brener continuing to lead the unit.