Under the NASAA Model Rules, the statute of limitations for civil liabilities is

the earlier of two years after the discovery of the facts and four years after the violation.

the earlier of three years after the discovery of facts and five years after the violation.

three years after the discovery of the facts and four years after the violation, whichever is greater.

the earlier of two years after the discovery of facts and three years after the sale.