Can an MD5-hash begin with a zero? What about SHA-1?
Of course. Or two zeros. Or more. In general, the probability of a "random" input hashing to a result with k leading zero nybbles is about 2-4k.