SmartGraphical: A Human-in-the-Loop Framework for Detecting Smart Contract Logical Vulnerabilities via Pattern-Driven Static Analysis and Visual Abstraction
Existing approaches to smart contract vulnerability detection are largely confined to syntactic analysis and struggle to identify deep logical flaws stemming from business logic defects. This work proposes a human-in-the-loop framework that integrates pattern-driven static analysis with visual abstraction, enabling developers to interactively explore logical attack surfaces through functional control flow graphs. By systematically incorporating visualization and expert judgment into the detection process, the approach overcomes the contextual understanding limitations inherent in purely automated tools. Evaluated on a large-scale dataset of real-world contracts and a user study involving 100 developers, the framework not only successfully reproduces high-severity vulnerabilities such as the SYFI rebase failure but also uncovers multiple logic flaws missed by mainstream detection tools, significantly improving both explainability and recall.