Finnish 10-year-old Jani is the youngest ever to get a bug bounty from Facebook. He demonstrated how he could delete any comment from the Facebook-owned photo-sharing app Instagram. Facebook has paid out more than $4.3 million to more than 800 researchers around the world. Last year, Facebook received 13,233 submissions and paid out $936,000 to 210 researchers for a total of 526 reports. The average payout was $1,780. The countries that claimed the most recipients were India, Egypt, and Trinidad and Tobago.”]
Source: https://nakedsecurity.sophos.com/2016/05/04/10-year-old-gets-10k-for-comment-deleting-instagram-bug/