S&P Global agreed to acquire OpenZeppelin, the smart-contract auditing and developer platform, according to the announcement posted to the ratings firm's investor relations site on September 17. The deal is subject to closing conditions; no purchase price or timeline was disclosed.

The acquisition extends S&P Global's push into onchain risk infrastructure for institutional clients. In recent months, the firm invested in Kaiko, a crypto market-data vendor serving banks and asset managers. OpenZeppelin's technical expertise in smart-contract security and its developer tools position it to help S&P Global build risk assessment products for tokenized assets and decentralized finance protocols that traditional finance firms are beginning to hold or trade.

OpenZeppelin has spent over a decade building libraries and audit services for Ethereum and other blockchain networks. The firm audits smart contracts for cryptocurrency projects and institutional clients, maintaining open-source code repositories used by developers across the sector. Its standing among crypto engineers and its relationships with major protocols give S&P Global direct access to the ecosystem's technical community and the contract code that underpins tokenized financial products.

S&P Global operates one of the world's three largest credit rating agencies alongside Moody's and Fitch. The firm also owns CapitalIQ, a data and analytics platform widely used by institutional investors. Integrating OpenZeppelin's audit and security capabilities into S&P Global's existing risk data products would allow the firm to offer banks and asset managers assessments of smart-contract risk alongside traditional credit analysis.

MSB Intel

Banks including JPMorgan and Goldman Sachs have launched tokenized asset platforms and staking services. Regulators in the US, Europe and Asia are clearing paths for banks to custody and trade digital assets. S&P Global and Moody's are the two largest traditional financial data providers in the crypto space. Kaiko's addition preceded the OpenZeppelin acquisition by months.

S&P Global has not previously made acquisitions in core crypto infrastructure. The firm determined to build this capability by acquisition rather than organically. No competing credit rating agency has yet acquired core crypto security or audit expertise.

The deal closes subject to standard conditions. S&P Global will determine how to integrate OpenZeppelin's audit teams and developer tools into its existing product suite, and whether to maintain the firm's public-facing audit practice or redirect its resources toward proprietary risk models for institutional clients.