The validate_against_state_and_deduct_caller docs state that the method is responsible for deducting the transfer value from the caller's balance.

In fact, the default implementation only deducts the fee and the deduction of the transfer value is performed during execution. Overrides which follow the documented behavior can result in loss of funds, since the deduction is also made during EVM execution.