On-chain finance enters implementation phase, with moves accelerating at JPMorgan, SBI, and others globally

S&P Global announced on September 17, 2026 that it has acquired OpenZeppelin, the industry standard for smart contract security, in a move that extends the ratings firm's risk-assessment mandate into the technology-risk layer of digital assets. OpenZeppelin's libraries underpin over $37 trillion in cumulative transfers and power 8 of the top 10 stablecoins, including USDC, and 10 of the top 10 tokenized money market funds, such as BlackRock's BUIDL and Franklin Templeton's BENJI. OpenZeppelin will operate as a separate business unit led by CEO Demian Brener, who will report directly to Yann Le Pallec, President of S&P Global Ratings. The deal lands on the same day the SEC granted a 5-year exemption for tokenized NMS stock trading, aligning with the broader GENIUS Act framework, and ahead of the DTCC Tokenization Service launch in October 2026. S&P Global is positioning itself as the gatekeeper of the technical standards regulators are expected to require for tokenized markets.

Mastercard rolled out a payment option Thursday that lets cardholders give an AI agent a virtual card to buy things online without checking in before each purchase, with limits on spending, retailers, or required approval before checkout. Rival Visa partnered with Alchemy earlier this year and has announced its own AI shopping and payment product, Visa Intelligent Commerce, which the company says is still being deployed, while Meta's Muse can search for products and navigate checkout but presents the purchase for the user's final approval. Phil Bruno, chief strategy and growth officer at payments company ACI Worldwide, called it "a land grab for infrastructure standards," saying that if card companies set the standards for agentic commerce they can keep the commerce in their environments for decades to come. Consumer appetite lags the infrastructure push: just 7% of U.S. and U.K. consumers surveyed who buy fashion items said they would allow an AI assistant to make purchases without approval under predefined conditions, according to research commissioned by ACI Worldwide, and more than half said they were uncomfortable allowing AI to purchase on their behalf. Mastercard has developed a digital paper trail called Verifiable Intent to record who authorized the agent to shop and what it was authorized to buy, but when asked who would be responsible if an agent made an incorrect, fraudulent, or unauthorized purchase, Mastercard pointed back to Verifiable Intent and did not specify who would ultimately be responsible if an agent bought something outside those instructions.