In a recent report, Finnish news site Iltalehti has revealed that a 10-year-old boy Helsinki has discovered a major security bug, on his own, in Facebook-owned photo-sharing service Instagram.

The security bug discovered by the boy - named Jani - pertains to a mechanism for getting into the Instagram servers and delete any text posted by the users on the site. The bug has been discovered by Jani even before he has reached the '13 years' age requirement laid down by Facebook for users opening an account on the social networking site.

According to the Iltalehti report, Facebook has paid an amount of $10,000 to Jani for reporting the security flaw in Instagram. The cash reward has been given to Jani by Facebook as part of the company's bug bounty program.

The Facebook bug bounty program offers cash rewards to people who report security bugs and flaws in Facebook's digital infrastructure, including the Instagram site. Jani has become the youngest person to receive a cash reward from Facebook under the mentioned program.

Sharing details about the flaw which helped him win the cash reward, Jani told Iltalehti that the flaw enabled him to delete any comment posted by Instagram users. In a demonstration of the flaw to Instagram, Jani managed to delete a comment made on a test account; and also claimed that he could even delete Justin Bieber's Instagram posts with the flaw he has discovered.