I ran into this also, and had this solution (from my Dec 20 message)
Here's what I did to avoid the issue: I edit the com.macromates.textmate.plist file to remove several odd strings in findHistory and replaceHistory. Once I did that (removing 8 of the 10 strings in each entry) then my Find/Replace didn't crash when I used a tab.