Shareholders could do a class action, any shareholder with the funds could launch a lawsuit. Tom could start one against Bill. The SEC could investigate further and take action if they concluded it is warranted.
Anyone can report a suspected fraud. GS has already done so to the SEC and that is why there is a CE on the company. I think further prosecutorial action may be coming against Pillsworth.