Table 8: Complete list of  $\mathcal{R}$  and its bounds under  $(\mathcal{W}_2, l_\infty)$  threat model based on ReDLR loss.
δ=1/510	δ=1/255
Network	R	ΔRu	ΔRl	R	ΔRu	ΔRl
Addepalli2021Towards_RN18	0.9762	0.0080	-0.1301	0.9533	0.0202	-0.1902
Addepalli2021Towards_WRN34	0.9774	0.0102	-0.0849	0.9590	0.0197	-0.1257
Addepalli2022Efficient_RN18	0.9740	0.0088	-0.1012	0.9534	0.0195	-0.1480
Addepalli2022Efficient_WRN_34_10	0.9749	0.0124	-0.0645	0.9563	0.0231	-0.0942
Andriushchenko2020Understanding	0.9679	0.0140	-0.0969	0.9438	0.0294	-0.1357
Carmon2019Unlabeled	0.9775	0.0079	-0.0803	0.9584	0.0178	-0.1162
Chen2020Adversarial	0.9639	0.0182	-0.0351	0.9371	0.0351	-0.0485
Chen2020Efficient	0.9713	0.0147	-0.0742	0.9495	0.0281	-0.1073
Chen2021LTD_WRN34_10	0.9758	0.0140	-0.0622	0.9578	0.0236	-0.0960
Chen2021LTD_WRN34_20	0.9780	0.0078	-0.1077	0.9635	0.0124	-0.1615
Cui2020Learnable_34_10	0.9694	0.0121	-0.0663	0.9462	0.0228	-0.0838
Cui2020Learnable_34_20	0.9710	0.0132	-0.0722	0.9492	0.0231	-0.0982
Dai2021Parameterizing	0.9814	0.0082	-0.0825	0.9654	0.0164	-0.1206
Debenedetti2022Light_XCiT-L12	0.9760	0.0076	-0.0730	0.9579	0.0181	-0.1063
Debenedetti2022Light_XCiT-M12	0.9781	0.0127	-0.0477	0.9574	0.0280	-0.0682
Debenedetti2022Light_XCiT-S12	0.9795	0.0078	-0.0911	0.9620	0.0161	-0.1370
Engstrom2019Robustness	0.9746	0.0086	-0.1117	0.9550	0.0174	-0.1600
Gowal2020Uncovering_28_10Extra	0.9791	0.0075	-0.0813	0.9623	0.0153	-0.1213
Gowal2020Uncovering_34_20	0.9748	0.0110	-0.0786	0.9546	0.0220	-0.1166
Gowal2020Uncovering_70_16	0.9722	0.0162	-0.0583	0.9552	0.0232	-0.0906
Gowal2020Uncovering_70_16Extra	0.9801	0.0070	-0.0786	0.9639	0.0136	-0.1145
Gowal2021Improving_28_10_dcpm_100m	0.9814	0.0070	-0.0852	0.9690	0.0119	-0.1281
Gowal2021Improving_70_16_dcpm_100m	0.9838	0.0072	-0.0778	0.9726	0.0114	-0.1150
Gowal2021Improving_R18_dcpm_100m	0.9797	0.0069	-0.1049	0.9626	0.0160	-0.1520
Hendrycks2019Using	0.9778	0.0090	-0.0963	0.9582	0.0183	-0.1398
Huang2020Self	0.9714	0.0117	-0.0764	0.9478	0.0252	-0.1082
Huang2021Exploring	0.9770	0.0109	-0.0556	0.9593	0.0208	-0.0803
Huang2021Exploring_ema	0.9792	0.0091	-0.0625	0.9623	0.0189	-0.0923
Huang2022Revisiting_WRN-A4	0.9810	0.0088	-0.0521	0.9646	0.0181	-0.0766
Jia2022LAS-AT_34_10	0.9762	0.0139	-0.0743	0.9575	0.0232	-0.1118
Jia2022LAS-AT_70_16	0.9751	0.0138	-0.0707	0.9583	0.0219	-0.1091
Pang2020Boosting	0.9745	0.0093	-0.0244	0.9528	0.0195	-0.0330
Pang2022Robustness_WRN28_10	0.9823	0.0055	-0.1311	0.9707	0.0095	-0.1988
Pang2022Robustness_WRN70_16	0.9836	0.0078	-0.0882	0.9711	0.0139	-0.1378
Rade2021Helper_dcpm	0.9808	0.0068	-0.0936	0.9672	0.0124	-0.1430
Rade2021Helperextra	0.9809	0.0066	-0.0846	0.9674	0.0130	-0.1298
Rade2021HelperR18_dcpm	0.9778	0.0056	-0.1266	0.9627	0.0098	-0.1904
Rade2021HelperR18extra	0.9784	0.0127	-0.0720	0.9587	0.0244	-0.1073
Rebuffi2021Fixing_106_16_cutmix_dcpm	0.9829	0.0046	-0.0787	0.9681	0.0130	-0.1163
Rebuffi2021Fixing_28_10_cutmix_dcpm	0.9816	0.0050	-0.1001	0.9651	0.0115	-0.1436
Rebuffi2021Fixing_70_16_cutmix_dcpm	0.9824	0.0072	-0.0694	0.9680	0.0141	-0.1035
Rebuffi2021Fixing_70_16_cutmixextra	0.9809	0.0056	-0.0718	0.9661	0.0126	-0.1058
Rebuffi2021Fixing_R18_dcpm	0.9758	0.0104	-0.0855	0.9564	0.0194	-0.1276
Rice2020Overfitting	0.9773	0.0082	-0.1061	0.9593	0.0159	-0.1547
Sehwag2020Hydra	0.9758	0.0096	-0.0805	0.9577	0.0192	-0.1201
Sehwag2021Proxy	0.9818	0.0073	-0.0831	0.9657	0.0162	-0.1202
Sehwag2021Proxy_R18	0.9795	0.0071	-0.0964	0.9609	0.0154	-0.1370
Sehwag2021Proxy_ResNest152	0.9805	0.0144	-0.0361	0.9667	0.0243	-0.0573
Sitawarin2020Improving	0.9747	0.0088	-0.1054	0.9511	0.0204	-0.1505
Sridhar2021Robust	0.9766	0.0087	-0.0832	0.9594	0.0160	-0.1240
Sridhar2021Robust_34_15	0.9749	0.0105	-0.0602	0.9537	0.0221	-0.0858
Wang2020Improving	0.9738	0.0195	-0.0134	0.9552	0.0341	-0.0185
Wang2023Better_WRN-28-10	0.9840	0.0054	-0.0767	0.9692	0.0129	-0.1120
Wang2023Better_WRN-70-16	0.9835	0.0049	-0.0747	0.9727	0.0074	-0.1121
Wong2020Fast	0.9674	0.0163	-0.0901	0.9448	0.0268	-0.1281
Wu2020Adversarial	0.9776	0.0089	-0.0837	0.9577	0.0221	-0.1215
Wu2020AdversarialExtra	0.9778	0.0077	-0.0963	0.9588	0.0158	-0.1419
Zhang2019Theoretically	0.9774	0.0132	-0.0670	0.9565	0.0277	-0.1003
Zhang2019You	0.9720	0.0135	-0.1073	0.9502	0.0247	-0.1580
Zhang2020Attacks	0.9724	0.0208	-0.0225	0.9504	0.0386	-0.0312
Zhang2020Geometry	0.9875	0.0035	-0.1267	0.9777	0.0068	-0.1838