The boy, who technically is not allowed to even join the site for another three years, discovered a bug that allowed him to delete comments made by other users.
The issue was "quickly" fixed after being discovered, said Facebook, which owns Instagram.
這個問題被發現后“迅速”地修復了,Instagram的所有者臉書稱。
Jani was paid soon after - making him the youngest ever recipient of the firm’s "bug bounty" prize.
約翰尼很快被授予獎金——他成為該公司“錯誤賞金”獎有史以來最年輕的獲得者。
After discovering the flaw in February, he emailed Facebook.
在二月份發現該漏洞后,他發電子郵件給臉書。
Security engineers at the company set up a test account for Jani to prove his theory - which he did.
該公司的安全工程師為約翰尼建立了一個測試賬戶去證明他的理論——而他做到了。
The boy, from Helsinki, told Finnish newspaper Iltalehti he planned to use the money to buy a new bike, football equipment and computers for his brothers.
Facebook told the BBC it had paid $4.3m to bug bounty recipients since 2011.
臉書告訴BBC,自2011年以來,已支付了430萬美元給“錯誤賞金”獲獎者。
Many companies offer a financial incentive for security professionals - and young children, evidently - to share flaws with the company, rather than selling them on the black market.