Before revision:  Through comprehensive experiments across five public datasets, we demonstrate that DARCY detects UniTrigger's adversarial attacks with up to 99\% TPR and less than 1\% FPR in most cases, while showing a difference of only around 2\% of F1 score on average in predicting for clean inputs .
After revision:  Through comprehensive experiments across five public datasets, we demonstrate that DARCY detects UniTrigger's adversarial attacks with up to 99\% TPR and less than 1\% FPR in most cases, while losing the prediction accuracy (in F1 score on average in predicting for clean inputs .