Nebula simply wrestled the arm off Bucky in the name of Christmas ... they work as mercenaries & it brings in a fair amount of money. So after Thanos attacked Knowhere they bought it from the ...