Incorrect Bounds Checking

Vyper is vulnerable to Incorrect Bounds Checking. The vulnerability is due to the lack of input validation when _abi_decode() is nested in an expression. This allows for the construction of uses of _abi_decode() that can bypass bounds checking, ultimately resulting in incorrect results.