diff --git a/stargan/attacks.py b/stargan/attacks.py
index 5c8b88c..fa2acf0 100644
--- a/stargan/attacks.py
+++ b/stargan/attacks.py
@@ -35,7 +35,7 @@ class LinfPGDAttack(object):
                 y = torch.FloatTensor(y).to(self.device)
 
             self.model.zero_grad()
-            loss = self.loss_fn(output, y)
+            loss = -self.loss_fn(output, y)
             loss.backward()
             grad = X.grad
 
diff --git a/stargan/solver.py b/stargan/solver.py
index 10e8d07..b0fdae6 100644
--- a/stargan/solver.py
+++ b/stargan/solver.py
@@ -613,7 +613,7 @@ class Solver(object):
                 with torch.no_grad():
                     gen_noattack, gen_noattack_feats = self.G(x_real, c_trg)
                 # Attack
-                x_adv, perturb = pgd_attack.perturb(x_real, gen_noattack, c_trg)
+                x_adv, perturb = pgd_attack.perturb(x_real, black, c_trg)
                 # x_adv = x_real + perturb
                 # x_adv = self.blur_tensor(x_adv)