It won't be different from any of the other silicon valley companies that went public based on numbers inflated by click fraud, but it may be one of the few that gets caught for it.
yes, ads can be GDPR compliant. Consider search ads. They are shown based on the keywords being searched by the user, no data collection needed for search ads to work really well.
Hi, I have helped many publishers that have been falsely accused of ad fraud due to bad measurements by the fraud detection companies. But also check to make sure your wordpress installation hasn't been compromised behind the scenes with malware that might actually be generating fake ad impressions. If you need further help, please reach out to me Augustine Fou (firstname . last name [at] gmail )