Before revision:  These studies conclude that it is hard to optimize the loss function for adversarial training with respect to parameters because the loss function is not smooth : i.e., its gradient is not Lipschitz continuous.
After revision:  These studies conclude that the difficulty of adversarial training is caused by the non-smoothness of the loss function : i.e., its gradient is not Lipschitz continuous.