COMP can be bought in cryptocurrency exchanges. The safest and most reliable right now is Binance