Before revision:  Through comprehensive experiments across four public datasets, we demonstrate that DARCY detects UniTrigger's adversarial attacks with up to 99\% TPR and less than 1 \% FPR in most cases, while losing the prediction accuracy (in F1) for clean inputs by less than 1\% on average.
After revision:  Through comprehensive experiments across four public datasets, we demonstrate that DARCY detects UniTrigger's adversarial attacks with up to 99\% TPR and less than 2 \% FPR in most cases, while losing the prediction accuracy (in F1) for clean inputs by less than 1\% on average.