S&P Global announced on September 17 that it has agreed to acquire OpenZeppelin, the smart-contract security company behind widely used open-source contract libraries. Financial terms were not disclosed, and the transaction remains subject to closing conditions.

OpenZeppelin will retain its name and operate as its own business unit. Chief executive Demian Brener will continue leading the company, reporting to Yann Le Pallec, president of S&P Global Ratings.

What changes for developers

OpenZeppelin says its Contracts libraries will remain free, open source and publicly maintained on GitHub. It also commits to keeping future versions open source, extending that commitment across its open-source applications and tools.

The company says existing security audits, engineering engagements and ecosystem programs will continue with the same team. Those assurances address the practical question for developers who depend on its reusable smart-contract components: whether an ownership change alters access or ongoing support.

Security joins financial risk assessment

S&P Global describes the acquisition as an expansion into onchain technology-risk assessment, complementing its work on digital-asset benchmarks and risk analysis. OpenZeppelin, founded in 2015, provides security assessments and development services alongside its contract libraries.

The combination would place smart-contract security expertise within a business reporting to a major financial ratings division. The announcements describe broader assessment capabilities, rather than a specific new rating product or methodology.

For now, this is an acquisition agreement, not a completed transaction. S&P Global says it does not expect the deal to materially affect its financial results; neither announcement specifies a closing date.