Security Notice
How to stay safe using Watergun — verified domains, phishing defense, and common scam patterns.
Your assets are your responsibility. Watergun is a non-custodial protocol — we never hold your funds, and we cannot reverse transactions or recover funds lost to phishing, scams, or user error. Read this page carefully before interacting with the protocol.
Product Destinations
The broader 9mm Pro suite became Watergun. 9mm Pro retains only the PulseChain DEX and $9MM token. Some Watergun products still use .9mm.pro hostnames; those legacy hostnames do not mean the products remain 9mm Pro offerings. A familiar-looking domain alone does not make a wallet request safe.
| Service | Official URL |
|---|---|
| Landing & Docs | watergun.pro · docs.watergun.pro |
| Watergun V2 / V3 DEX (non-PulseChain) | dex.watergun.pro |
| Watergun Swap | swap.watergun.pro |
| 9mm Pro PulseChain DEX and $9MM information | 9mm.pro |
| GitHub Org | github.com/9mm-exchange |
| Telegram | t.me/watergunpro |
| X (Twitter) | @watergundotpro |
Anything that looks like 9mm-pro.com, 9mmfinance.io, 9mm.app, nine-mm.pro, or any other variant is not ours. Phishing sites buy ads, impersonate staff, and mimic the real UI — the domain is the only thing that matters.
Phishing & Impersonation
The most common scam pattern against DEX users:
The lure
You see a link — in a Telegram DM, a reply on X, a search ad, or a Google result. It looks like Watergun. It may even be a verified ad placement.
The fake site
The site loads what looks like dex.watergun.pro but is actually a look-alike domain. The UI is often a near-perfect clone, sometimes copied pixel-for-pixel from the real site.
The wallet prompt
You're asked to "connect wallet" or "verify your eligibility." The signature request is crafted to look routine but actually approves unlimited token spending, signs a malicious transaction, or drains your wallet outright.
Irreversible loss
Once you sign, the transaction settles on-chain. There is no undo button on a blockchain. The funds are gone. No one at Watergun can recover them.
Defense Checklist
- ✅ Always check the URL bar. Use the exact destination for the product you intended:
docs.watergun.pro,dex.watergun.pro, orswap.watergun.profor Watergun; start at9mm.profor the 9mm Pro PulseChain DEX or $9MM. One extra character means a different site. - ✅ Treat claim links as obsolete. The former 9MM Pro-era claim and revenue-sharing programs are sunset; do not connect a wallet based on an old guide or a reward message.
- ✅ Type the URL manually or use a bookmark. Don't click links from DMs or search ads.
- ✅ Read every signature prompt. If you don't understand what you're signing, don't sign it.
- ✅ Use a wallet with simulation (Rabby and Internet Money both simulate transactions so you see the outcome before signing).
- ✅ Assume Telegram / Discord / X DMs are scams. No one from the Watergun team will DM you first. Ever.
Seed Phrases and Private Keys
Never share your seed phrase with anyone — including anyone claiming to be from Watergun support.
- Real support does not need your seed phrase to help you.
- A claim or reward message must never be used as a reason to disclose your seed phrase; the former 9MM Pro-era claim program is sunset.
- Real airdrop pages do not require your seed phrase.
- Screenshots of your seed phrase count as sharing — don't store them in cloud photo backups.
- Anyone who asks is a scammer. Always. Without exception.
Contract Address Verification
Before you interact with a Watergun DEX or NFT contract:
- Cross-check the address against github.com/9mm-exchange/deployments — the canonical repository.
- Verify on the chain's block explorer that the contract is marked as Verified and its bytecode matches the expected source.
- For DEX deployments, compare against Deployments; for listed NFTs, see Supported Chains. For $9MM token-specific addresses, visit 9mm.pro.
Never trust a contract address posted in a Telegram group, Discord channel, or X reply without cross-checking against the GitHub repo first.
Common Scam Patterns
If You've Been Compromised
If you suspect your wallet was drained or you signed a malicious transaction:
- Move any remaining funds to a fresh wallet immediately. Attackers sometimes return for leftover balances.
- Revoke approvals you don't recognize using a tool like revoke.cash.
- Do not contact "recovery services." They are always scams and will drain the rest.
- Report the scam site to the relevant hosting provider and to the community so others can avoid it.
- Treat the compromised wallet as burned. Never use it again.
Watergun cannot recover funds lost to phishing or scams. We can add the fake site to public warning lists — please report it in Telegram so we can spread awareness.
Related
- Recommended Wallets — wallets with built-in transaction simulation and phishing detection
- Claims (Sunset) — status of the former claim program
- Supported Chains — verified addresses for every chain