An action shall not be maintained to enforce a civil or criminal liability created under this act unless brought before the expiration of 4 years after the act or transaction constituting the violation.