<!-- mobian-agent-page publisher="time" canonical="https://time.com/4317365/instagram-bug-bounty-10-year-old-finland/" -->

---
description: The boy found a serious hole in Instagram’s comments mechanism
title: Why Instagram Paid Out $10,000 to a 10-Year-Old Finnish Kid
image: https://static.time.com/v3/assets/bltea6093859af6183b/blt9b083cb883e7865e/69888ce9cd1bba25a1700064/gettyimages-158602575.jpg?branch=production&amp;width=3840&amp;quality=75&amp;auto=webp&amp;crop=16:9
---

![](https://static.time.com/v3/assets/bltea6093859af6183b/blt9b083cb883e7865e/69888ce9cd1bba25a1700064/gettyimages-158602575.jpg?branch=production&width=3840&quality=75&auto=webp&crop=16:9)

* [Business](/section/business/)  
## Business  

Update your preferences in [Account Settings](/account/preferences/)  
Close
* [Tech](/tag/time-section-tech/)  
## Tech  

Update your preferences in [Account Settings](/account/preferences/)  
Close

# Why Instagram Paid Out $10,000 to a 10-Year-Old Finnish Kid


by 

[David Meyer / Fortune](/author/fortune/)


## David Meyer / Fortune


Update your preferences in [Account Settings](/account/preferences/)

Close

May 4, 2016 3:07 AM CUT

![FRANCE-US-IT-INTERNET-TELECOM-INSTAGRAM](https://static.time.com/v3/assets/bltea6093859af6183b/blt9b083cb883e7865e/69888ce9cd1bba25a1700064/gettyimages-158602575.jpg?branch=production&width=3840&quality=75&auto=webp&crop=3:2)

The Instagram logo is displayed on a smartphone on December 20, 2012

The Instagram logo is displayed on a smartphone on December 20, 2012Lionel Bonaventure—AFP/Getty Images

by 

[David Meyer / Fortune](/author/fortune/)


## David Meyer / Fortune


Update your preferences in [Account Settings](/account/preferences/)

Close

May 4, 2016 3:07 AM CUT

A 10-year-old boy from Helsinki received $10,000 from Instagram for finding a serious bug in the app’s comment feature.

According to Finnish media, the boy—named only as Jani—found he could delete other people’s comments by inserting malicious code into the comment field. Jani said he could even have executed the attack against the account of Justin Bieber, if he wanted to.

Facebook-owned Instagram confirmed that Jani was the youngest person to get paid through its “bug bounty” program.

Like many larger online firms, Instagram pays security researchers to inform it of the vulnerabilities they find and to encourage them to locate bugs before miscreants do.

Jani told Instagram about the flaw in February and collected his reward the following month. He said he will use the money to buy a new bike.

The company has paid out over $4.3 million since 2011 to over 800 researchers. It is not uncommon for teenagers to submit reports, but a 10-year-old is something else.

Unsurprisingly, Jani told Finnish newspaper [_Iltalehti_](http://www.iltalehti.fi/digi/2016050221506011%5Fdu.shtml "undefined") that he wants to work in cybersecurity when he grows up.

[_This article originally appeared on Fortune.com_](http://fortune.com/2016/05/03/instagram-bounty-boy/?iid=sr-link2 "undefined")

```json
[{"@context":"https://schema.org","@type":"NewsArticle","@id":"https://time.com/4317365/instagram-bug-bounty-10-year-old-finland/","mainEntityOfPage":{"@type":"WebPage","@id":"https://time.com/4317365/instagram-bug-bounty-10-year-old-finland/"},"headline":"Why Instagram Paid Out $10,000 to a 10-Year-Old Finnish Kid","datePublished":"2016-05-04T03:07:47.000Z","dateModified":"2026-04-13T08:49:56.375Z","description":"The boy found a serious hole in Instagram’s comments mechanism","url":"https://time.com/4317365/instagram-bug-bounty-10-year-old-finland/","keywords":["Tech","apps","Finland","Instagram","cyber security","Coding"],"thumbnailUrl":"https://static.time.com/v3/assets/bltea6093859af6183b/blt9b083cb883e7865e/69888ce9cd1bba25a1700064/gettyimages-158602575.jpg?branch=production&width=1200&quality=75&auto=webp&crop=1200:675&height=675","author":[{"@type":"Person","name":"David Meyer / Fortune"}],"articleSection":"Business","image":[{"@type":"ImageObject","url":"https://static.time.com/v3/assets/bltea6093859af6183b/blt9b083cb883e7865e/69888ce9cd1bba25a1700064/gettyimages-158602575.jpg?branch=production&width=1200&quality=75&auto=webp&crop=1200:675&height=675","width":1200,"height":675,"headline":"FRANCE-US-IT-INTERNET-TELECOM-INSTAGRAM","caption":"FRANCE-US-IT-INTERNET-TELECOM-INSTAGRAM","creditText":"Lionel Bonaventure—AFP/Getty Images","representativeOfPage":true}],"publisher":{"@type":"Organization","name":"Time","url":"https://time.com/","logo":{"@type":"ImageObject","url":"https://time.com/images/logo.png","width":528,"height":156},"foundingDate":"March 3, 1923","sameAs":["https://www.facebook.com/time","https://www.instagram.com/time/?hl=en","https://twitter.com/time","https://www.pinterest.com/timemagazine"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"item":{"@id":"/section/business/","name":"Business"}},{"@type":"ListItem","position":2,"item":{"@id":"/tag/time-section-tech/","name":"Tech"}},{"@type":"ListItem","position":3,"item":{"@id":"https://time.com/4317365/instagram-bug-bounty-10-year-old-finland/","name":"Why Instagram Paid Out $10,000 to a 10-Year-Old Finnish Kid"}}]},{"@context":"https://schema.org","@type":"VideoObject","name":"Madonna: I Found Out Through Instagram That I'd Been Hacked","description":"In a new interview, the queen of pop says her millions of Instagram followers lent her a hand — by letting her know that her music had leaked online","thumbnailUrl":"https://cdn.jwplayer.com/v2/media/OvyRraBZ/poster.jpg?width=720","uploadDate":"2015-02-26T12:44:08.000Z","contentUrl":"https://cdn.jwplayer.com/manifests/OvyRraBZ.m3u8","embedUrl":"https://time.com/4317365/instagram-bug-bounty-10-year-old-finland/","duration":"PT1M23S","potentialAction":{"@type":"SeekToAction","target":"https://time.com/4317365/instagram-bug-bounty-10-year-old-finland/?jw_start={seek_to_second_number}","startOffset-input":"required name=seek_to_second_number"}}]
```
