Before revision:  Furthermore, we show that the white-box generated adversarial texts can transfer across other black-box models, shedding light on an effective  way to examine the robustness of existing NLP models. 
After revision:  Furthermore, we show that the white-box generated adversarial texts can transfer across other black-box attacks in practice. Our work sheds light on an effective way to examine the robustness of existing NLP models.