S&P Global is moving further into crypto, but not by launching another token or trading product. The financial data giant has agreed to acquire OpenZeppelin, the smart contract security company whose technology sits underneath much of the blockchain economy.
The deal gives S&P Global access to OpenZeppelin’s security tools, open-source infrastructure and technical expertise as banks and asset managers begin putting more financial products on public blockchains.
The financial terms were not disclosed. OpenZeppelin will keep operating under its own name as a separate S&P Global business unit, with co-founder and CEO Demian Brener remaining at the helm and reporting to S&P Global Ratings President Yann Le Pallec.
For S&P Global, the acquisition is less about crypto speculation than about understanding what can go wrong when finance starts running on code.
Smart contracts are programs deployed on blockchains such as Ethereum, Solana and Cardano. They automatically execute transactions once predetermined conditions are met, making their security a critical part of everything from stablecoins to tokenized investment products and DeFi protocols.
Why S&P Global Is Bringing Smart Contract Risk Into the Equation
As more traditional financial products move onchain, the risks involved are no longer limited to credit quality or market volatility. The underlying code becomes part of the infrastructure that institutions have to trust.
S&P Global said OpenZeppelin will help it build security assessments, benchmarks and data services focused on the technical risks surrounding onchain financial products.
The company described its broader digital assets strategy as “bringing trusted data, benchmarks and transparent risk assessment to markets as they move onchain.”
That puts OpenZeppelin in an unusual position. Founded in 2015, the company develops open-source smart contract libraries while also providing security assessments and development services. Its technology is already used across stablecoins, DeFi and other blockchain-based financial systems.
And the timing matters. Institutional interest in tokenized finance is growing, with BlackRock recently launching tokenized money market funds on Solana and Ethereum. Banks are also exploring blockchain infrastructure for tokenized deposits, stablecoin payments and automated settlement.
The regulatory environment is shifting alongside it. The SEC has introduced an “innovation exemption” allowing qualifying platforms to trade tokenized U.S. stocks on public blockchains without registering as national securities exchanges. The move came days after the Clarity Act stalled in the Senate.
For S&P Global, that creates a broader market for the kind of infrastructure OpenZeppelin specializes in: not simply measuring traditional financial risk, but examining the technology underneath the products themselves.
The company has already been building its presence in digital assets. S&P Dow Jones Indices previously helped develop the S&P Digital Markets 50 Index, which combines 35 blockchain-related stocks with 15 cryptocurrencies and was designed to offer onchain verifiability through Chainlink.
OpenZeppelin’s CEO said the acquisition could expand that reach across both established financial institutions and blockchain-native businesses. “OpenZeppelin’s standards, technology, and expertise already power the infrastructure behind the world’s leading stablecoins, tokenized funds, DeFi protocols, and onchain markets,” Demian Brener said.
The larger story is straightforward: as financial assets migrate onto blockchains, the business of assessing their risks is starting to migrate too. S&P Global is betting that understanding the code will become just as important as understanding the market around it.