I don't know how QCX managed their clients' deposit addresses. They probably give each user a unique deposit address. I can tell you that nobody withdrawing to 0x45cab8d124fce8663581172c614f2ee08d01d48e on Kraken has anything to do with QCX. Maybe the arb disappeared on Dec 8.