S&P Global Completes Acquisition of OpenZeppelin to Bolster Digital Asset Risk Assessment
Key Facts
S&P Global announced on October 26 that it had completed its acquisition of OpenZeppelin, following an agreement announced on September 17, adding smart contract security and on-chain technology expertise to its business. The company said the deal expands its risk assessment capabilities to include on-chain technology risk, alongside its assessments of smart contracts and related technologies. The move is part of its efforts to build risk assessment capabilities and develop the digital asset ecosystem as capital markets shift to on-chain environments. S&P did not disclose the financial terms of the deal and said it does not expect it to have a material impact on its financial results. The agreement announcement said OpenZeppelin would continue operating as an independent business unit under its own name, led by CEO Damian Brener, and report to Yann Le Pallec, president of S&P Global Ratings.
S&P said combining OpenZeppelin’s technical expertise with its risk assessment capabilities complements its work in digital asset markets. The aim includes supporting assessments of on-chain system security and developing related metrics and information, while extending the scope of assessment to the technical risks institutions may face in these environments. Founded in 2015, OpenZeppelin says its smart contract libraries support transfers valued at more than $37 trillion. It has also conducted more than 900 security engagements, during which S&P said it identified more than 10,000 vulnerabilities before they reached production. The company provides security assessments, secure development services and an open-source smart contract library—activities directly related to the technology layer S&P wants to incorporate into its assessments.
OpenZeppelin said its libraries will remain free, open source and publicly available on GitHub, with maintenance continuing in public. It said security audits, engineering work and ecosystem programs will continue with the same team. These commitments place the library used by smart contract development teams among the products the company has said will remain available after its transfer to S&P ownership. The deal announcement had said OpenZeppelin would continue as an independent business unit, while the company clarified that its operations would continue with the same team. The published materials did not specify a launch date for a new product resulting from the acquisition or a timetable for delivering new services.
The acquisition comes as S&P Global Ratings expands its tools for assessing digital asset risks. On October 4, it launched Digital Asset Lending Pool Risk Assessments, a forward-looking opinion on the relative risks to which an investor’s position in a digital asset lending pool may be exposed. The company said total deposits in these pools reached $10 billion in September 2026, compared with $1.5 billion in September 2024. The assessment covers six factors: credit quality, liquidity, asset management risks, blockchain, protocol, and pool security and governance. S&P stressed that the assessment is not a credit rating and does not address yield levels. It also said it would publish initial pool assessments in subsequent announcements.
When announcing the pool assessment tool, Yann Le Pallec, president of S&P Global Ratings, said, "Demand for independent risk assessments that connect traditional finance with decentralized innovation is becoming increasingly important as digital assets become institutionally established." The company said its previous steps included assessments of stablecoin stability, its first credit rating of a decentralized finance protocol, and its first rating of a Bitcoin-backed structured finance transaction. Adding OpenZeppelin brings technical and security risk assessment into these tools, while the pool assessment provides a framework for credit, liquidity and governance risks. S&P Global is scheduled to report third-quarter 2026 results and hold a conference call on October 27. The company’s shares closed at $450.31 on October 23; EL7 data show closes of $427.83 on October 19, $438.12 on October 20, $443.16 on October 21, and then $453.10 on October 22, before falling to Friday’s close.