The paper reports that GCG and its universal variant achieve high attack success across all four task suites and outperform heuristic attacks on several tasks.

来源：paper:p. 8, Section 4.5, Table 2