Before revision:  Through comprehensive experiments across four public datasets, we demonstrate that DARCY detects UniTrigger's adversarial attacks with up to 99\% TPR and less than 1 \% FPR in most cases, while losing the prediction accuracy (in F1) for clean inputs by less than 1\% on average. We finally show that DARCY with multiple trapdoors is also robust under different assumptions concerning attackers' knowledge and skills  .
After revision:  Through comprehensive experiments across four public datasets, we demonstrate that DARCY detects UniTrigger's adversarial attacks with up to 99\% TPR and less than 1 \% FPR in most cases, while losing the prediction accuracy (in F1) for clean inputs by less than 1\% margin. We also demonstrate that DARCY with multiple trapdoors is also robust under different assumptions concerning attackers' knowledge and skills .