zeppelin

OpenZeppelin develops open-source smart contract libraries and delivers security services for blockchain systems, positioning itself as a security standard for onchain finance. Its open-source stack centers on OpenZeppelin Contracts, a Solidity library of battle-tested, community-reviewed implementations of ERC standards for Ethereum and other EVM chains, together with a Cairo contracts library, the Contracts Wizard, Contracts MCP, Contracts Skills, and the Ethernaut security-education game. Operational tooling includes Relayer and Monitor for automating and monitoring onchain workflows, introduced alongside Actions.

On the services side, the company pioneered smart contract security auditing and now sells engagements aimed at banks, asset managers, tokenization platforms, payment networks, fintechs and neobanks, capital markets infrastructure, blockchain networks, DeFi protocols, central banks and regulators. Its Continuous Security Program covers architecture, development, security review and ongoing support as systems change, and the company markets AI-assisted delivery ("OpenZeppelin AI", AI-powered security audits introduced in 2023). Focus programs include tokenization and asset issuance, stablecoins and tokenized deposits, collateral/repo/treasury, custody and asset servicing, onchain asset management and yield products, and payments, settlement and cross-border flows.

The company states compliance with SOC 2 Type II, CCSS, GDPR and CCPA, contributes to industry standards bodies including ISO, the Blockchain Security Standards Council, the Enterprise Ethereum Alliance and Linux Foundation Decentralized Trust, and reports engagement with regulators including the U.S. Treasury, SEC, UK FCA, French ACPR/AMF, Hong Kong SFC and the Hong Kong Monetary Authority.

Founding story

Sources state only that OpenZeppelin was founded in 2015; Demian Brener is listed as Founder & CEO. No further founding details are provided.

Business model

OpenZeppelin combines freely available open-source developer libraries and tools with paid security services and programs sold to institutions, protocols and blockchain platforms, including audits, ongoing security reviews and a subscription-style Continuous Security Program.

Sources indicate commercial engagements with 200+ active customers for security audits, security reviews and continuous security programs; specific pricing or revenue figures are not disclosed in the sources.

Traction

Company-reported figures include over $31 trillion (and, on the About page, $33.2 trillion) in total value transferred via OpenZeppelin Contracts, $250B+ in total value locked protected by its audits, 200+ active customers, a 95%+ customer re-engagement rate, an NPS of 71, 1M+ lines of code reviewed, 700+ critical and high vulnerabilities uncovered, and 64% of active wallets having interacted with OpenZeppelin Contracts. Named customers and engagements include WisdomTree, USDT0, Uniswap v4, and Matter Labs/ZKsync.

Latest developments

Recent company publications cover quantum risk in blockchain, security implications of the GENIUS Act, security standards for financial institutions building onchain, and an announcement that OpenZeppelin will accelerate secure development for institutions on Canton. Research output in 2025 included work on Ethereum's execution layer, fully homomorphic encryption, Arbitrum Stylus testing, ERC-4626 exchange-rate manipulation risks and rollup governance security councils, plus an audit of OpenAI's EVMBench.