OpenZeppelin

Crypto · Blockchain Security · Financial Infrastructure

Acquisition

S&P Global agrees to acquire smart-contract security firm OpenZeppelin

Ratings can't catch a bug in a smart contract, so S&P is buying the code layer banks need before they touch tokenized markets.

• S&P Global (NYSE: SPGI) has entered an agreement to acquire OpenZeppelin, the smart-contract security firm; deal terms were not disclosed.
• Founded in 2015, OpenZeppelin builds an open-source smart contract library and provides security audits used to secure stablecoins, tokenized funds and DeFi protocols.
• OpenZeppelin's contracts have underpinned more than $37 trillion in value transferred and the firm has completed 900+ security engagements surfacing 10,000+ vulnerabilities.
• OpenZeppelin will operate as a separate S&P Global business unit, keep its name and open-source libraries free on GitHub, with CEO Demian Brener continuing to lead and reporting to S&P Global Ratings president Yann Le Pallec.
• Nine of the top 10 stablecoins and all of the top 10 tokenized money market funds by market cap are built on OpenZeppelin Contracts, per the company's own figures.
• The deal follows S&P Global leading a strategic investment in crypto data provider Kaiko just days earlier, part of a broader push to build digital-asset risk and benchmark tools.
• Traditional credit ratings assess an issuer's reserves and solvency but not the code risk in the smart contracts moving the money, and S&P is betting institutions will need that layer covered before onchain finance scales.