That is entirely plausible.
Also, anonymous vote systems, even ones with complex mathematical magics securing a reliable crypto-pseudonym, are very hard to get right.
For a really obvious one, you can not (should not) neglect time a node spends online when assigning "voting power", otherwise, on the voting day, you will find yourself flooded with strange "noob nodes" that never transacted and never mined, and just arrived to cast votes and disappear.