The scan should start from the beginning of the oplog but on the cold start the writes from the first wt checkpoint could have been missed. This mostly only applies to the oplog collection.